Supply-chain breaches dominate the window: Jaguar Land Rover confirms a data compromise and UK rail operator LNER warns customers after a supplier attack. CISA adds an actively exploited DELMIA Apriso flaw to KEV. Europol names a suspected ransomware admin Most Wanted. Policy shifts include EU Data Act switching duties and US debate over reauthorizing CISA 2015 before September 30 sunset.

In the past 48 hours, defenders faced urgent patch mandates for Sitecore and SAP S/4HANA exploitation, while Google fixed two Android zero-days. Investigations revealed a Chess.com data breach and GhostRedirector SEO hijacks. Major disruptions hit Jaguar Land Rover, and policy shifts saw U.S. info-sharing reauthorization progress alongside EU and Czech regulatory actions.

Ransomware disrupted Sweden’s municipal IT and Pennsylvania’s Attorney General’s office, while attackers abused Velociraptor and VS Code tunnels for stealthy access. New threats include WhatsApp zero-click exploits, TamperedChef malvertising, Brokewell Android malware, and ScarCruft’s RokRAT espionage. Indian police dismantled trafficking-to-scam pipelines and online fraud rings, underscoring cybercrime’s human dimension alongside technical threats.

DFIR & Incident Response Elastic: How to reduce alert overload in defence SOCs (2025-08-22, EMEA). Guidance focuses on AI-powered triage […]

🔍 Digital Forensics & Incident Response Citizen Lab reveals VPN app flaws across multiple Android tools: Shared code and poor […]