This 48-hour DFM roundup covers major developments in digital investigations, cybercrime, ransomware, software supply-chain compromise and data-security policy. Highlights include the Apollo and Origin breaches, fourth-party risk at US Bancorp, ransomware at Inission, poisoned Rust crates, active MLflow exploitation, international fraud investigations, Indian Firebase takedowns and new Chinese data-security requirements affecting organisations and investigators worldwide across increasingly interconnected digital environments.

Digital investigations lead this 48-hour roundup, with forensic reviews of data breaches, cross-border cybercrime investigations, major service disruptions and active exploitation activity. Coverage also examines Singapore scam arrests, emerging electronic-evidence rules and new cybersecurity requirements for critical infrastructure. The edition highlights why evidence preservation, cross-platform correlation and carefully qualified attribution remain central to credible cyber investigations worldwide today and beyond.

Investigators faced a week shaped by evidence preservation and attribution challenges. The FBI highlighted cyber range training for realistic digital evidence collection, while the Justice Department resolved a search-warrant compliance case involving cloud data retention. Coverage also examined UK telecoms security policy changes, active Chrome and LiteLLM exploitation, a French government messaging compromise, and expanding scam operations globally.

Australian police exposed Cambodian scam scripts, Meta alleged renewed NSO-linked targeting, and investigators tracked cloud-theft and payment-skimming campaigns. A supply-chain worm hit npm packages, critical flaws affected Gogs and UniFi systems, and multinational enforcement actions disrupted scam infrastructure. Policy developments included European technology sovereignty initiatives and updated cloud-security guidance influencing evidence preservation and cross-border investigations.

Investigators tracked a FIFA-themed fraud network, examined a law firm’s Microsoft 365 breach, and followed prosecutions tied to stolen government access. Major disclosures affected telecom and travel customers, while researchers documented FortiClient exploitation and The Gentlemen ransomware. Singapore warned about AI agent risks, ENISA assessed NIS2 sector maturity, and Dutch police arrested a suspect linked to the Ajax data breach.