Telecommunications networks are facing a new generation of AI-driven threats spanning Voice, SMS, IP, RF, and illegal streaming infrastructure. This briefing examines the convergence of telecom fraud, compromised IPTV ecosystems, AI-enabled attack automation, and cross-domain resilience failures, highlighting the operational, regulatory, and national security implications for carriers, regulators, DFIR professionals, and critical infrastructure stakeholders operating within increasingly interconnected communications environments.

Enterprise connected devices now underpin physical security, operational technology and digital infrastructure across UK organisations. This briefing examines how government policy from DSIT aligns with technical guidance from NCSC, NPSA and NACE, highlighting overlaps, tensions and practical implications for DFIR teams responsible for investigation, resilience and evidence preservation across increasingly converged cyber-physical environments within modern enterprise security and incident response.

Microsoft fixed an exploited SharePoint zero-day among 165 flaws, Adobe patched critical Acrobat bugs, and Basic-Fit disclosed a breach affecting about one million members. Investigators traced mailbox compromises hitting Ukrainian prosecutors, while authorities froze stolen cryptocurrency in Operation Atlantic. Regulators and central bankers also escalated scrutiny of Anthropic’s Claude Mythos Preview and its cybersecurity implications for financial stability and resilience.

CISA, FBI and NSA warned that Iranian-linked actors are targeting internet-connected PLCs in U.S. critical infrastructure, while a Massachusetts hospital diverted ambulances after a cyberattack. Investigators tracked cloud data theft to abused authentication tokens after a SaaS integrator breach, and the DOJ disrupted a GRU-linked DNS hijacking botnet as NIST advanced an AI risk profile for critical infrastructure operators broadly.

This edition tracks a cloud-breach attribution at the European Commission, emergency remediation for actively exploited FortiClient EMS systems, and CISA action on a TrueConf flaw. It also covers a cyberattack on a Massachusetts emergency communications centre, Microsoft’s warning on fast-moving Medusa intrusions, and Cambodia’s new cybercrime law aimed at scams, laundering, recruitment, and illicit data handling.