F5 BIG-IP exploitation escalated after a flaw was reclassified to critical RCE, while a Fortinet FortiClient EMS bug also came under active attack. The European Commission confirmed a data breach after the Europa web platform incident, and UK sanctions targeted infrastructure tied to Cambodia-based scam operations. NCA’s 2026 assessment also linked cybercrime more closely with wider organised offending patterns overall.

Microsoft dismantles Rhysida ransomware infrastructure and CISA issues 13 new ICS advisories, while breaches hit Sotheby’s and Malaysia’s Regency Hospital. California enforces a 30-day breach notification rule as ISO refreshes privacy standards. DFIR teams face renewed scrutiny of trust stores, industrial systems, and rapid-response readiness amid tightening global regulatory and law-enforcement actions.