The latest DFM 48h Global News Roundup covers KDDI credential exposure, public-sector extortion, Medtronic data compromise, Gitea and ColdFusion exploitation, Spain’s arrest of a suspected pro-Russian hacktivist supporter, Canadian active cyber operations, and new UK and EU policy developments shaping investigative readiness, evidential integrity and cyber resilience.

This briefing examines the growing gap between modern telecommunications threats and the regulatory frameworks designed to oversee them. It explores infrastructure-layer harm, cross-domain attack activity, AI-driven telecom abuse, and the limitations of current oversight models, arguing for shared intelligence, standardised telemetry, and closer collaboration between regulators and operators to strengthen national communications resilience and accountability.

Investigators tracked a FIFA-themed fraud network, examined a law firm’s Microsoft 365 breach, and followed prosecutions tied to stolen government access. Major disclosures affected telecom and travel customers, while researchers documented FortiClient exploitation and The Gentlemen ransomware. Singapore warned about AI agent risks, ENISA assessed NIS2 sector maturity, and Dutch police arrested a suspect linked to the Ajax data breach.

Microsoft Intune hardening guidance followed the Stryker breach, while ConnectWise patched a critical ScreenConnect flaw. Investigators tied Russian operations to a Zimbra breach and iPhone exploitation in Ukraine. Europol’s Operation Alice shuttered 373,000 dark-web sites, CISA flagged active SharePoint exploitation, and NIST issued final guidance on secure DNS deployment and 5G security design.

European Commission contained suspicious activity against its device management platform, while reports highlighted CERT-EU indicators on infrastructure. Microsoft warned of active exploitation of SolarWinds Web Help Desk flaws. Singapore’s telco sector investigated an alleged state-linked intrusion as Winter Olympics services faced disruption attempts. UK authorities examined cyber-sanctions compliance and NIS bill progress, and Substack and Coupang disclosed user data exposure.