What can escaped AI agents, compromised court systems and actively exploited vulnerabilities tell investigators about today’s changing threat landscape? This DFM News Roundup examines the evidence behind the latest cyber incidents, investigations and enforcement activity worldwide, from OpenAI and Citrix to cybercrime operations and AI security. Discover the developments shaping digital investigations, attribution and evidential readiness over the past 48 hours.

Digital investigations dominate this 48-hour roundup, with Thomson Reuters’ C-Track breach, Serbian spyware findings, a major driver-licence data investigation and blockchain tracing in Singapore. Other developments include Dustin’s cyber incident, law-firm breaches, critical Citrix NetScaler vulnerabilities, CERT-EU threat reporting, enforcement action in Singapore and the US, UK cyber legislation scrutiny, and updated NIST encryption guidance for investigators and security teams.