This edition examines the cyberattack affecting France’s national statistics department, disruption following a major Delhi data centre fire, supplier-targeted attacks against education technology providers, Operation Endgame malware infrastructure takedowns, newly exploited vulnerabilities added to CISA’s KEV catalogue, and continuing software supply-chain risks requiring stronger evidence preservation, dependency mapping and investigative readiness across interconnected digital environments.

Nintendo confirmed employee data theft through a third-party provider, while Kodak acknowledged a breach following claims by ShinyHunters. Novo Nordisk faced extortion allegations, Mackay Sugar continued recovery from operational disruption, and authorities dismantled a Chinese phishing service. Investigators also tracked Fortinet credential exposure, ransomware defence-evasion techniques, critical NGINX vulnerabilities, and emerging policy questions surrounding AI access controls.

This 48-hour roundup covers fake Maine breach-portal filings, GitHub metadata abuse linked to Shai-Hulud variants, Sri Lankan scam-network raids, Indian cryptocurrency fraud tracing, claimed Novo Nordisk and Foxconn data theft, CISA and CERT-In vulnerability warnings, US domain seizures for AI-generated abuse, and UK and FTC policy signals on age assurance and imposter scams across public, platform and enforcement evidence streams.

OpenAI rotated certificates after the TanStack npm supply-chain compromise, while Foxconn resumed operations following a ransomware incident claimed by Nitrogen. Cisco warned of active exploitation against critical SD-WAN infrastructure, and investigators examined breaches affecting Canvas and Nvidia GeForce NOW partners UK cyber sector analysis and ENISA CVE authority expansion highlighted dependence on evidence handling, vulnerability governance and investigative capability globally.

Canvas exposure disclosures, Trellix repository access, Gujarat cyber-fraud arrests and Australian cryptocurrency seizures dominated this 48-hour investigations cycle. U.S. prosecutors secured sentencing against a ransomware negotiator linked to multimillion-dollar extortion operations, while CISA expanded its exploited vulnerability catalog and the UK NCSC warned organisations to prepare for faster AI-driven vulnerability discovery and patching pressures across critical digital environments worldwide systems.