This 48-hour global roundup examines ransomware disruption at Fairlife, attacks affecting Ecopetrol and Kenya’s presidency website, newly exploited WordPress vulnerabilities, telecommunications fraud, cryptocurrency scams and preparations for EU Cyber Resilience Act reporting. The edition highlights the growing need for coordinated evidence preservation across cloud platforms, manufacturing systems, digital services, financial networks and third-party infrastructure worldwide during complex cross-border cyber investigations.

This edition tracks major developments in digital investigations, cybercrime enforcement, ransomware activity, infrastructure exploitation and policy readiness. Highlights include the Odido telecoms investigation, arrests linked to cyber fraud, rising global ransomware disclosures, active exploitation of Joomla extensions, and preparations for EU Cyber Resilience Act reporting duties. The roundup also examines cloud assurance and evidential challenges across distributed environments for investigators.

From Trivy’s supply-chain compromise and Citrix’s new NetScaler memory leak to Mazda’s Thailand breach, Stryker’s recovery update, and US sentencing tied to ransomware access brokering, this DFM roundup tracks incidents, investigations, enforcement, and policy shifts. It also covers NIST’s CSF 2.0 workforce guide, a DevSecOps draft, and Treasury’s cyber insurance review alongside Crunchyroll and Infinite Campus breach disclosures this week.

Google reported access-to-operator handoffs dropping to 22 seconds, while Trio-Tech disclosed ransomware at its Singapore unit and Oracle shipped an emergency patch for a critical Fusion Middleware flaw. Europol said 373,000 dark web sites were shut down, and U.S. authorities sentenced facilitators tied to North Korean remote-worker infiltration and a separate business email compromise scheme targeting victims across borders globally.

Australia warned on Cisco SD-WAN exploitation, U.S. investigators examined a suspected China-linked FBI network breach, LexisNexis and TriZetto disclosed major data exposures, and authorities disrupted LeakBase and Tycoon 2FA. The roundup also tracks Google’s 90 zero-day tally for 2025, White House cyber strategy priorities, and European Commission guidance for applying the Cyber Resilience Act across health, government, telecom, and sectors.