Novocure disclosed patient-record exposure, while investigators examined a BGP hijack that redirected Virtualizor updates. Mumbai and Cambodian authorities disrupted cyber-fraud operations, Aesto Health’s breach expanded to 9.5 million people, and Greece investigated attacks on state agencies. Europol disrupted the long-running Sality botnet as US prosecutors advanced a malware case and regulators issued healthcare and IoT security actions across multiple jurisdictions.

This 48-hour roundup examines healthcare and insurance breaches, ransomware disruption, SharePoint exploitation, darknet investigations and coordinated law-enforcement action. It also covers the sentencing of Scattered Spider members, charges linked to cyber-enabled investment fraud, vulnerability disclosure guidance and European data-protection enforcement, highlighting the growing importance of evidence preservation, cross-border investigation and operational resilience for digital investigation teams worldwide.

This edition examines healthcare and nuclear-sector data exposure, ransomware infrastructure, exploited Microsoft and SAP vulnerabilities, and international cybercrime enforcement. The roundup highlights why digital investigations increasingly depend on evidence provenance, cross-platform correlation, resilient logging and careful attribution. It also considers emerging policy responses affecting critical infrastructure, artificial intelligence coordination and the handling of complex, cross-border digital evidence by investigators worldwide.