Cisco patched a Unified Communications RCE (CVE-2026-20045) amid active exploitation, while CSA Singapore urged urgent updates. CISA issued a batch of ICS advisories for OT operators. Investigators tracked the Telegram-linked Tudou Guarantee marketplace and authorities tied suspects to Black Basta. Policy moved on Ireland’s spyware law, EU high-risk vendor phase-out, and UK NIS Bill progress. Chainlit flaws threatened cloud apps.

Over the past 48 hours, responders tracked UK warnings on Russia-aligned DDoS activity, Ingram Micro’s disclosure affecting 42,000 people, and a brief hijack of Iranian state television feeds. Investigations detailed LinkedIn-delivered malware and Gemini prompt injection, while policymakers advanced EU cybersecurity reforms, new UK fraud reporting, and Singapore issued fresh vulnerability advisories impacting cloud deployments, broadcast resilience, and response planning.

Digital Forensics Magazine’s 48-hour cybersecurity roundup tracks the most actionable developments across incident response, investigations, major disruptions, and emerging threats worldwide. This edition highlights ransomware and DDoS impacts, a WatchGuard Firebox zero-day under active exploitation, and supply-chain risk from compromised repositories and malicious npm packages. It also covers law-enforcement crackdowns, policy shifts affecting identity verification and privacy, plus new standards guidance for protecting tokens and assertions.