Digital forensics in UK law enforcement stands at a turning point. The National Audit Office’s 2025 Police Productivity report exposes rising digital demand, fragmented governance, and critical skills shortages. This briefing analyses the findings, links them to forensic capability and reform, and outlines how national standardisation could transform police productivity and justice outcomes.

ACSC and CISA released synchronized Exchange Server hardening guidance as new KEV entries and ICS advisories highlight active exploitation across IT and OT systems. Major incidents hit Ribbon Communications and Conduent, while U.S. prosecutions target Conti and insider espionage cases. DFIR teams should prioritize patch validation, supplier risk reviews, and Exchange baseline enforcement.

Qilin ransomware tactics evolve, commercial spyware resurfaces, and municipal services face fresh extortion pressure. A Lanscope zero-day and BIND 9 risks demand swift patching, while Singapore tackles SIM-fraud networks on the ground. New supply-chain ransomware guidance and crypto-finance sanctions signal policy tightening. Plus, standards shifts in ICMPv6 and hashing preview changes coming to defensive stacks.

CISA issues new ICS advisories, Pwn2Own researchers reveal 34 zero-days, and Microsoft warns of AI-driven cyberattacks. Global investigations continue into SharePoint ToolShell exploitation and healthcare data breaches. Law enforcement seizes $14 billion in cryptocurrency, while NIST and ISO release new cybersecurity standards shaping compliance, risk management, and DFIR priorities for enterprises worldwide.

Microsoft dismantles Rhysida ransomware infrastructure and CISA issues 13 new ICS advisories, while breaches hit Sotheby’s and Malaysia’s Regency Hospital. California enforces a 30-day breach notification rule as ISO refreshes privacy standards. DFIR teams face renewed scrutiny of trust stores, industrial systems, and rapid-response readiness amid tightening global regulatory and law-enforcement actions.