This edition examines the cyberattack affecting France’s national statistics department, disruption following a major Delhi data centre fire, supplier-targeted attacks against education technology providers, Operation Endgame malware infrastructure takedowns, newly exploited vulnerabilities added to CISA’s KEV catalogue, and continuing software supply-chain risks requiring stronger evidence preservation, dependency mapping and investigative readiness across interconnected digital environments.

This edition examines the Tata Electronics breach claim, ransomware disruption at Bajaj Auto, cyberattacks affecting Iranian banking services, and enforcement action targeting infrastructure linked to Southeast Asian scam operations. Coverage also includes AI-related cyber risk warnings, post-quantum security policy developments, WordPress plugin exploitation, and investigative challenges involving evidence provenance, attribution and complex supply-chain relationships globally.

This edition examines a Texas wildlife licensing data breach, the Klue supply-chain attack affecting cybersecurity firms, FortiBleed credential exposure, healthcare-sector incidents involving Australian Clinical Labs and SunDoctors, and coordinated action against Evil Corp and the SocGholish botnet. Coverage also includes active vulnerability exploitation, SaaS evidence challenges, policy developments, and investigative readiness considerations for organisations globally.

Nintendo confirmed employee data theft through a third-party provider, while Kodak acknowledged a breach following claims by ShinyHunters. Novo Nordisk faced extortion allegations, Mackay Sugar continued recovery from operational disruption, and authorities dismantled a Chinese phishing service. Investigators also tracked Fortinet credential exposure, ransomware defence-evasion techniques, critical NGINX vulnerabilities, and emerging policy questions surrounding AI access controls.

This 48-hour roundup covers fake Maine breach-portal filings, GitHub metadata abuse linked to Shai-Hulud variants, Sri Lankan scam-network raids, Indian cryptocurrency fraud tracing, claimed Novo Nordisk and Foxconn data theft, CISA and CERT-In vulnerability warnings, US domain seizures for AI-generated abuse, and UK and FTC policy signals on age assurance and imposter scams across public, platform and enforcement evidence streams.