This edition examines HSIN and Kubota breach findings, Scattered Spider extradition, FortiBleed ransomware links, SharePoint and Cisco exploitation, malicious browser extensions, illegal streaming-domain seizures, and policy movement around UK managed service providers, NIST ransomware guidance and EU crisis response. The common thread is evidence quality, exposed infrastructure and resilience under pressure for investigators, responders and defenders today globally online worldwide.

The Cyber Security and Resilience Bill modernises the UK’s NIS framework but remains heavily cyber-centric. This briefing argues that true national resilience depends on recognising data centres, utilities, ports and other CNI as cyber-physical systems. Protecting the digital built environment—power, cooling, OT, building services and engineering systems—is essential, with RSES offering a key competence pathway.