Chinese threat actors impersonated a U.S. lawmaker in a spyware campaign, while a ransomware group disrupted operations at Ireland’s K Club. CISA flagged a critical Sitecore CVE under active exploitation. A U.S. bill to extend cyber intel sharing advanced. DFIR teams must prioritise patching, phishing defences, and policy tracking this week.