This 48-hour roundup covers investigations into healthcare email compromise and cyber-enabled fraud, Norway’s government-service DDoS disruption, Nutex Health data exfiltration, actively exploited Gitea and macOS vulnerabilities, INTERPOL’s Operation Jackal IV arrests, and new guidance on agentic AI, privacy and runtime attestation. The focus remains on evidential integrity, traceability, attribution and cross-platform investigative readiness across sectors and jurisdictions for digital investigators.

This edition examines coordinated intrusions affecting Minnesota water systems, UK government data theft, anti-forensic Linux cryptomining, Cisco firewall exploitation and North Korean software supply-chain activity. It also covers ransomware affecting an Australian school, disruption at Angola’s largest telecommunications operator, cyberstalking charges, privacy enforcement and the growing evidential demands created by cross-platform digital investigations and operational technology evidence preservation practices.

This edition examines digital evidence triage, suspected espionage at NATO headquarters, exposed cloud databases, ransomware claims, software supply-chain controls, Windchill exploitation, deepfake-enabled stalking, organised digital-arrest fraud and expanded AI analysis of criminal records. The investigative focus is on preservation, provenance, attribution, timeline reconstruction and the need to distinguish verified evidence from uncorroborated claims across jurisdictions and platforms during complex investigations.

This edition examines investigations into AI containment failures, browser extension exposure, Russian Zimbra espionage and attacks on government systems. It also covers major data breaches affecting Origin Energy and Paidwork, active exploitation of Check Point and PTC vulnerabilities, cybercrime arrests across Asia-Pacific, and new European sanctions and UK assurance guidance shaping investigative readiness, evidence preservation and attribution across affected organisations.

This edition examines how investigators reconstruct autonomous AI activity, validate regional data breaches, trace cyber-enabled fraud and disrupt criminal infrastructure. It also covers active SharePoint and GlobalProtect exploitation, ransomware claims, phishing-platform seizures and emerging governance controls for powerful cyber models. The roundup highlights the evidence, attribution and cross-border coordination challenges shaping current digital and cyber investigations worldwide across multiple jurisdictions.