DFM’s latest 48-hour roundup covers ransomware recovery updates, major platform breaches, and active exploitation alerts, alongside fraud investigations and law enforcement crackdowns. Policy signals include UK resilience legislation progress and rising phishing of public officials, while NIST advances AI-era security profiles. The edition also tracks consumer app exposure risks and third-party telemetry weaknesses shaping incident response.

In the past 48 hours, responders tracked macOS infostealer lures and a ransomware decryptor weakness, while regulators opened probes into UK mobile outages and Seoul investigators intensified action over Coupang. Major breach disclosures include 700Credit impacts, alongside React2Shell/KEV patch pressure. Enforcement operations targeted SIM and laundering networks. Consumer risks rose from exposed AI imagery, fiction-app records leaks, and fake apps.

This briefing examines Version 2 of the Forensic Science Regulator’s Statutory Code of Practice through the lens of the digital forensics practitioner. It explains why the Code exists, outlines key changes from Version 1, and critically analyses the requirements that directly affect digital investigations, evidential integrity, quality management, and courtroom admissibility.

This 48-hour DFM roundup tracks global cyber risk across DFIR, investigations, major incidents, exploitation and governance. Highlights include government email compromise, large-scale consumer breach fallout, OT and Windows patch triage, and enforcement actions disrupting hostile infrastructure. The meta theme is evidence readiness: deception telemetry, standardized baselines, supplier controls and rapid remediation are now inseparable from incident response and regulatory defensibility for teams.

Ransomware, supply-chain breaches and zero-day exploits dominate this 48-hour DFIR roundup. Hospitals, telecoms and e-commerce platforms face data theft, while regulators tighten data-sovereignty and patching expectations in Europe and India. New Windows and React vulnerabilities, AT&T’s dark web fallout and fresh law-enforcement advisories underscore why robust logging, rapid patching and vendor risk management remain non-negotiable for security and leadership teams.