This edition tracks major developments in cybercrime enforcement, ransomware prosecutions, infrastructure exploitation and UK cyber resilience. Highlights include more than 5,800 arrests in INTERPOL’s latest fraud operation, new Ryuk and BlackCat cases, the widening FortiBleed credential campaign, OpenPLC vulnerabilities, reported AI-enabled ransomware activity and plans for an AI-supported national Cyber Shield.

This briefing examines the growing gap between modern telecommunications threats and the regulatory frameworks designed to oversee them. It explores infrastructure-layer harm, cross-domain attack activity, AI-driven telecom abuse, and the limitations of current oversight models, arguing for shared intelligence, standardised telemetry, and closer collaboration between regulators and operators to strengthen national communications resilience and accountability.

French identity services faced potential data exposure, while New South Wales investigated unauthorised transfers of confidential Treasury files. Ukrainian police dismantled a Telegram bot farm supporting disinformation campaigns, and U.S. prosecutors secured guilty pleas in ransomware and phishing cases. Meanwhile, new .NET vulnerabilities and serial-to-IP device flaws highlighted ongoing exposure risks across connected infrastructure environments.

From Trivy’s supply-chain compromise and Citrix’s new NetScaler memory leak to Mazda’s Thailand breach, Stryker’s recovery update, and US sentencing tied to ransomware access brokering, this DFM roundup tracks incidents, investigations, enforcement, and policy shifts. It also covers NIST’s CSF 2.0 workforce guide, a DevSecOps draft, and Treasury’s cyber insurance review alongside Crunchyroll and Infinite Campus breach disclosures this week.

Google reported access-to-operator handoffs dropping to 22 seconds, while Trio-Tech disclosed ransomware at its Singapore unit and Oracle shipped an emergency patch for a critical Fusion Middleware flaw. Europol said 373,000 dark web sites were shut down, and U.S. authorities sentenced facilitators tied to North Korean remote-worker infiltration and a separate business email compromise scheme targeting victims across borders globally.