Nintendo confirmed employee data theft through a third-party provider, while Kodak acknowledged a breach following claims by ShinyHunters. Novo Nordisk faced extortion allegations, Mackay Sugar continued recovery from operational disruption, and authorities dismantled a Chinese phishing service. Investigators also tracked Fortinet credential exposure, ransomware defence-evasion techniques, critical NGINX vulnerabilities, and emerging policy questions surrounding AI access controls.

Investigators faced a week shaped by evidence preservation and attribution challenges. The FBI highlighted cyber range training for realistic digital evidence collection, while the Justice Department resolved a search-warrant compliance case involving cloud data retention. Coverage also examined UK telecoms security policy changes, active Chrome and LiteLLM exploitation, a French government messaging compromise, and expanding scam operations globally.

Education-sector cyber incidents, software supply-chain compromises and actively exploited mobile vulnerabilities dominated this reporting period. Reported attacks affecting Indian examination platforms, malicious npm package activity and Android security flaws drew significant attention. Regulators in Hong Kong, Europe and the United States also advanced AI-related cybersecurity measures, while Europol and U.S. policymakers highlighted evolving cybercrime enforcement and investigative capabilities.

Investigators tracked a China-linked breach at Wiley Rein, Dutch police arrested a suspect tied to AFC Ajax intrusions, and CISA warned of an exploited LiteSpeed plugin zero-day. Reporting also linked Iranian actors to Los Angeles transit network disruption while CERT-In disclosed multiple Trend Micro Apex One vulnerabilities. The roundup examines evidential preservation, attribution confidence, and cross-platform investigative correlation challenges globally.

Grafana confirmed a breach after cybercriminal exposure claims, while researchers tracked Telegram-based iPhone unlocking services tied to stolen devices. Investigators also examined active exploitation of a critical NGINX vulnerability, cloned Shai-Hulud malware campaigns and INTERPOL’s Operation Ramz arrests across the MENA region. Policy discussions focused on AI-assisted vulnerability discovery and regulatory expectations surrounding automated cyber risk analysis in financial sectors.