AI-linked intrusions, exposed government systems, exploited edge devices and state-linked spyware all feature in this edition, alongside major breach investigations, criminal prosecutions and new regulatory guidance. Across the stories, a common theme emerges: attribution is becoming harder, evidence more fragmented and investigative certainty more valuable. This roundup explores what the latest cases reveal about the changing demands on digital investigations.

Digital investigations, cyber-fraud networks, major data breaches and fresh regulatory obligations lead this edition of the DFM 48h Global News Roundup. Highlights include device and network evidence tracing, payment-infrastructure seizures, Revolut and EasyEquities breach investigations, BlueMoon exploit activity, Debian security updates, Black Axe extraditions, and new European Cyber Resilience Act reporting and preparedness measures.

This 48-hour DFM roundup tracks system recovery at Dustin and the UK Department for Education, cybercrime investigations in Australia and Singapore, major disruption at Boston Scientific and Springfield schools, new crypter and Microsoft vulnerability guidance, US and UK enforcement action, and policy moves on online child protection and Singapore’s digital infrastructure security and resilience requirements for investigators and security practitioners.

Digital investigations dominate this 48-hour roundup, with Thomson Reuters’ C-Track breach, Serbian spyware findings, a major driver-licence data investigation and blockchain tracing in Singapore. Other developments include Dustin’s cyber incident, law-firm breaches, critical Citrix NetScaler vulnerabilities, CERT-EU threat reporting, enforcement action in Singapore and the US, UK cyber legislation scrutiny, and updated NIST encryption guidance for investigators and security teams.

Novocure disclosed patient-record exposure, while investigators examined a BGP hijack that redirected Virtualizor updates. Mumbai and Cambodian authorities disrupted cyber-fraud operations, Aesto Health’s breach expanded to 9.5 million people, and Greece investigated attacks on state agencies. Europol disrupted the long-running Sality botnet as US prosecutors advanced a malware case and regulators issued healthcare and IoT security actions across multiple jurisdictions.