Canvas exposure disclosures, Trellix repository access, Gujarat cyber-fraud arrests and Australian cryptocurrency seizures dominated this 48-hour investigations cycle. U.S. prosecutors secured sentencing against a ransomware negotiator linked to multimillion-dollar extortion operations, while CISA expanded its exploited vulnerability catalog and the UK NCSC warned organisations to prepare for faster AI-driven vulnerability discovery and patching pressures across critical digital environments worldwide systems.

Vercel traced a customer-impacting breach to a compromised OAuth app, while investigators in India linked abusive Google Drive activity to specific IP records. Police dismantled mule-account fraud networks, and a Scattered Spider member entered a guilty plea. Meanwhile, Bluesky faced DDoS disruption and UK officials advanced board-level cyber-resilience expectations across major organisations nationwide.

Google patched an in-the-wild Chrome zero-day while GreyNoise tied most Ivanti RCE probing to a single bulletproof-hosted IP. Canada Goose investigated a 600k-record leak claim as Dutch telco Odido faced exposure fallout. Police in Thailand and India targeted mule accounts, and the EDPB addressed spyware abuse. PCI SSC opened comments and CERT-EU issued a CTI framework for EU institutions today.