This edition examines coordinated intrusions affecting Minnesota water systems, UK government data theft, anti-forensic Linux cryptomining, Cisco firewall exploitation and North Korean software supply-chain activity. It also covers ransomware affecting an Australian school, disruption at Angola’s largest telecommunications operator, cyberstalking charges, privacy enforcement and the growing evidential demands created by cross-platform digital investigations and operational technology evidence preservation practices.

This DFM 48-hour roundup examines compromised email accounts, exposed server-management interfaces, disputed breach claims, attacks on Australian energy customers and Minnesota water systems, actively exploited VeloCloud and Fastjson vulnerabilities, and new operational-technology recovery guidance. The edition focuses on evidential confidence, attribution limits, cross-provider records, preservation priorities and the investigative consequences of containment, isolation and service restoration during disruptive cyber incidents.

This 48-hour global roundup examines ransomware disruption at Fairlife, attacks affecting Ecopetrol and Kenya’s presidency website, newly exploited WordPress vulnerabilities, telecommunications fraud, cryptocurrency scams and preparations for EU Cyber Resilience Act reporting. The edition highlights the growing need for coordinated evidence preservation across cloud platforms, manufacturing systems, digital services, financial networks and third-party infrastructure worldwide during complex cross-border cyber investigations.

This edition examines healthcare and nuclear-sector data exposure, ransomware infrastructure, exploited Microsoft and SAP vulnerabilities, and international cybercrime enforcement. The roundup highlights why digital investigations increasingly depend on evidence provenance, cross-platform correlation, resilient logging and careful attribution. It also considers emerging policy responses affecting critical infrastructure, artificial intelligence coordination and the handling of complex, cross-border digital evidence by investigators worldwide.

Investigators tracked unauthorized access to a Gaza aid registration platform, examined an npm supply-chain compromise affecting 36 packages, and assessed exploitation of a Magento cache flaw. Authorities disrupted scam infrastructure tied to Southeast Asian compounds, researchers exposed Gemini notification-based manipulation, while policymakers reviewed AI security risks and critical infrastructure resilience. Additional inquiries covered healthcare data exposure, forged identity networks, globally.