This edition examines AI coding agents executing malicious GitHub content, Tata Electronics strengthening controls after a reported breach, expanding Klue-Salesforce victim reporting, insurance-sector cyber disruption, Operation Endgame malware infrastructure takedowns, and evolving supplier risk. Coverage also explores Cisco SD-WAN vulnerabilities, fraud website ecosystems and investigative practices for preserving provenance across increasingly complex digital environments worldwide.

This edition examines the cyberattack affecting France’s national statistics department, disruption following a major Delhi data centre fire, supplier-targeted attacks against education technology providers, Operation Endgame malware infrastructure takedowns, newly exploited vulnerabilities added to CISA’s KEV catalogue, and continuing software supply-chain risks requiring stronger evidence preservation, dependency mapping and investigative readiness across interconnected digital environments.

OpenAI rotated certificates after the TanStack npm supply-chain compromise, while Foxconn resumed operations following a ransomware incident claimed by Nitrogen. Cisco warned of active exploitation against critical SD-WAN infrastructure, and investigators examined breaches affecting Canvas and Nvidia GeForce NOW partners UK cyber sector analysis and ENISA CVE authority expansion highlighted dependence on evidence handling, vulnerability governance and investigative capability globally.

Joint NSA-partner guidance and an NHS alert urge urgent hunting and hardening for actively exploited Cisco Catalyst SD-WAN flaws. Dutch telco Odido reports attackers publishing stolen customer data, while ManoMano notifies 38 million users after a third-party breach. Trend Micro patched critical Apex One console RCE. DOJ says scam-center crypto freezes exceeded $580m. EU advanced an undersea cable protection plan.