University data breaches, long-term espionage activity, banking disruptions, critical enterprise vulnerabilities and major law-enforcement operations feature in this 48-hour roundup. Coverage includes the Nottingham University breach, PeopleSoft zero-day exploitation, cyberattacks affecting Iranian banks, active Splunk and Ivanti security risks, FBI-led disruption of phishing infrastructure, and new policy measures aimed at accelerating cyber resilience and evidence preservation.

Investigators tracked a FIFA-themed fraud network, examined a law firm’s Microsoft 365 breach, and followed prosecutions tied to stolen government access. Major disclosures affected telecom and travel customers, while researchers documented FortiClient exploitation and The Gentlemen ransomware. Singapore warned about AI agent risks, ENISA assessed NIS2 sector maturity, and Dutch police arrested a suspect linked to the Ajax data breach.