This DFM 48h Global News Roundup examines major developments across digital investigations, cyber incidents, threat intelligence, law enforcement and policy. Coverage includes Quest and CareCloud breaches, Medusa ransomware, active N-central exploitation, new CISA KEVs, Iranian cyber-theft charges, Singapore’s criminal-harms codes and cross-border action against cyber-enabled crime, with an editorial focus on evidential integrity and investigative confidence for DFIR practitioners worldwide.

This edition examines evidential integrity risks in DNA analysis, public-sector data exposure and beneficial ownership records, alongside ransomware affecting an Australian school and European standards bodies. It also covers N-central and MediaTek vulnerabilities, cross-border cyberfraud arrests, EU AI transparency obligations and Singapore guidance on secure generative AI use, with practical implications for investigators and incident responders worldwide across operational environments.

CISA added five newly exploited vulnerabilities to KEV as Cisco warned more Catalyst SD-WAN flaws are under active attack. Europol seized LeakBase and disrupted Tycoon 2FA, while Passaic County reported a malware outage and LexisNexis confirmed a data breach. Google challenged geofence warrants, and draft Cyber Resilience Act guidance signalled tougher product-security expectations for vendors and defenders globally this week.