This 48-hour DFM roundup covers a HUSKY Medicaid breach, ShinyHunters claims involving ReliaQuest, cyber-fraud investigations, disruption at a UK power generator, widespread WordPress compromise, active Zimbra exploitation, DOUBLECUP malware activity, major cybercrime arrests and new cybersecurity governance measures. The focus remains firmly on digital evidence, attribution, incident reconstruction, enforcement and practical investigative readiness across global cyber operations for practitioners worldwide.

This DFM 48-hour roundup examines compromised email accounts, exposed server-management interfaces, disputed breach claims, attacks on Australian energy customers and Minnesota water systems, actively exploited VeloCloud and Fastjson vulnerabilities, and new operational-technology recovery guidance. The edition focuses on evidential confidence, attribution limits, cross-provider records, preservation priorities and the investigative consequences of containment, isolation and service restoration during disruptive cyber incidents.

This edition examines investigations into AI containment failures, browser extension exposure, Russian Zimbra espionage and attacks on government systems. It also covers major data breaches affecting Origin Energy and Paidwork, active exploitation of Check Point and PTC vulnerabilities, cybercrime arrests across Asia-Pacific, and new European sanctions and UK assurance guidance shaping investigative readiness, evidence preservation and attribution across affected organisations.

The latest DFM 48h Global News Roundup covers KDDI credential exposure, public-sector extortion, Medtronic data compromise, Gitea and ColdFusion exploitation, Spain’s arrest of a suspected pro-Russian hacktivist supporter, Canadian active cyber operations, and new UK and EU policy developments shaping investigative readiness, evidential integrity and cyber resilience.

This edition examines a Texas wildlife licensing data breach, the Klue supply-chain attack affecting cybersecurity firms, FortiBleed credential exposure, healthcare-sector incidents involving Australian Clinical Labs and SunDoctors, and coordinated action against Evil Corp and the SocGholish botnet. Coverage also includes active vulnerability exploitation, SaaS evidence challenges, policy developments, and investigative readiness considerations for organisations globally.