This 48-hour global roundup examines ransomware disruption at Fairlife, attacks affecting Ecopetrol and Kenya’s presidency website, newly exploited WordPress vulnerabilities, telecommunications fraud, cryptocurrency scams and preparations for EU Cyber Resilience Act reporting. The edition highlights the growing need for coordinated evidence preservation across cloud platforms, manufacturing systems, digital services, financial networks and third-party infrastructure worldwide during complex cross-border cyber investigations.

This edition examines healthcare and nuclear-sector data exposure, ransomware infrastructure, exploited Microsoft and SAP vulnerabilities, and international cybercrime enforcement. The roundup highlights why digital investigations increasingly depend on evidence provenance, cross-platform correlation, resilient logging and careful attribution. It also considers emerging policy responses affecting critical infrastructure, artificial intelligence coordination and the handling of complex, cross-border digital evidence by investigators worldwide.

Investigators tracked unauthorized access to a Gaza aid registration platform, examined an npm supply-chain compromise affecting 36 packages, and assessed exploitation of a Magento cache flaw. Authorities disrupted scam infrastructure tied to Southeast Asian compounds, researchers exposed Gemini notification-based manipulation, while policymakers reviewed AI security risks and critical infrastructure resilience. Additional inquiries covered healthcare data exposure, forged identity networks, globally.

Telecommunications networks are facing a new generation of AI-driven threats spanning Voice, SMS, IP, RF, and illegal streaming infrastructure. This briefing examines the convergence of telecom fraud, compromised IPTV ecosystems, AI-enabled attack automation, and cross-domain resilience failures, highlighting the operational, regulatory, and national security implications for carriers, regulators, DFIR professionals, and critical infrastructure stakeholders operating within increasingly interconnected communications environments.

Investigations span exposed property records in Tasmania, stolen Canvas student data, and a breach affecting Asian football organisations. Authorities warn of cyber-enabled cargo theft, while researchers link Shadow-Earth-053 to infrastructure targeting. Active cPanel exploitation and OAuth abuse campaigns expand attack surfaces, as new guidance highlights risks from autonomous AI systems and investigative challenges in evidence attribution.