The latest DFM 48h Global News Roundup covers KDDI credential exposure, public-sector extortion, Medtronic data compromise, Gitea and ColdFusion exploitation, Spain’s arrest of a suspected pro-Russian hacktivist supporter, Canadian active cyber operations, and new UK and EU policy developments shaping investigative readiness, evidential integrity and cyber resilience.

This edition examines a Texas wildlife licensing data breach, the Klue supply-chain attack affecting cybersecurity firms, FortiBleed credential exposure, healthcare-sector incidents involving Australian Clinical Labs and SunDoctors, and coordinated action against Evil Corp and the SocGholish botnet. Coverage also includes active vulnerability exploitation, SaaS evidence challenges, policy developments, and investigative readiness considerations for organisations globally.

Nintendo confirmed employee data theft through a third-party provider, while Kodak acknowledged a breach following claims by ShinyHunters. Novo Nordisk faced extortion allegations, Mackay Sugar continued recovery from operational disruption, and authorities dismantled a Chinese phishing service. Investigators also tracked Fortinet credential exposure, ransomware defence-evasion techniques, critical NGINX vulnerabilities, and emerging policy questions surrounding AI access controls.

Investigators faced a week shaped by evidence preservation and attribution challenges. The FBI highlighted cyber range training for realistic digital evidence collection, while the Justice Department resolved a search-warrant compliance case involving cloud data retention. Coverage also examined UK telecoms security policy changes, active Chrome and LiteLLM exploitation, a French government messaging compromise, and expanding scam operations globally.

Education-sector cyber incidents, software supply-chain compromises and actively exploited mobile vulnerabilities dominated this reporting period. Reported attacks affecting Indian examination platforms, malicious npm package activity and Android security flaws drew significant attention. Regulators in Hong Kong, Europe and the United States also advanced AI-related cybersecurity measures, while Europol and U.S. policymakers highlighted evolving cybercrime enforcement and investigative capabilities.