What can escaped AI agents, compromised court systems and actively exploited vulnerabilities tell investigators about today’s changing threat landscape? This DFM News Roundup examines the evidence behind the latest cyber incidents, investigations and enforcement activity worldwide, from OpenAI and Citrix to cybercrime operations and AI security. Discover the developments shaping digital investigations, attribution and evidential readiness over the past 48 hours.

Grafana confirmed a breach after cybercriminal exposure claims, while researchers tracked Telegram-based iPhone unlocking services tied to stolen devices. Investigators also examined active exploitation of a critical NGINX vulnerability, cloned Shai-Hulud malware campaigns and INTERPOL’s Operation Ramz arrests across the MENA region. Policy discussions focused on AI-assisted vulnerability discovery and regulatory expectations surrounding automated cyber risk analysis in financial sectors.