Across the past 48 hours, DFIR teams tackled Uvalde CISD’s ransomware fallout and major healthcare disclosures, while Google patched an actively exploited Chrome zero-day. Law enforcement advanced cases tied to the TfL intrusion and broader critical-infrastructure attacks. Policy and standards moved too, with the UK’s Cyber Growth Action Plan and new NIST guidance on KEMs and TLS 1.3 visibility initiatives.

In the past 48 hours, defenders faced urgent patch mandates for Sitecore and SAP S/4HANA exploitation, while Google fixed two Android zero-days. Investigations revealed a Chess.com data breach and GhostRedirector SEO hijacks. Major disruptions hit Jaguar Land Rover, and policy shifts saw U.S. info-sharing reauthorization progress alongside EU and Czech regulatory actions.

Ransomware disrupted Sweden’s municipal IT and Pennsylvania’s Attorney General’s office, while attackers abused Velociraptor and VS Code tunnels for stealthy access. New threats include WhatsApp zero-click exploits, TamperedChef malvertising, Brokewell Android malware, and ScarCruft’s RokRAT espionage. Indian police dismantled trafficking-to-scam pipelines and online fraud rings, underscoring cybercrime’s human dimension alongside technical threats.