This edition tracks major developments in cybercrime enforcement, ransomware prosecutions, infrastructure exploitation and UK cyber resilience. Highlights include more than 5,800 arrests in INTERPOL’s latest fraud operation, new Ryuk and BlackCat cases, the widening FortiBleed credential campaign, OpenPLC vulnerabilities, reported AI-enabled ransomware activity and plans for an AI-supported national Cyber Shield.

This DFM 48h News Roundup covers AI-driven ransomware, browser data leakage, OAuth abuse, Mustang Panda activity, ransomware claims, SharePoint exploitation, Scattered Spider extradition, Japanese cybercrime enforcement, and policy developments from NIST and the European Parliament. The focus is digital investigations, evidential readiness, cross-platform artefacts, and the operational challenge of proving what happened.

This edition examines HSIN and Kubota breach findings, Scattered Spider extradition, FortiBleed ransomware links, SharePoint and Cisco exploitation, malicious browser extensions, illegal streaming-domain seizures, and policy movement around UK managed service providers, NIST ransomware guidance and EU crisis response. The common thread is evidence quality, exposed infrastructure and resilience under pressure for investigators, responders and defenders today globally online worldwide.

This edition examines AI coding agent supply-chain risks, the Tata Electronics investigation, RustDuck botnet expansion, SimpleHelp exploitation, major breaches affecting Aflac Japan and Nidec, BlueHammer and Oracle vulnerabilities, UK ransomware reporting trends, and evolving cybersecurity governance. The reporting highlights the growing importance of preserving provenance and evidential integrity across increasingly distributed digital investigations and cloud-based environments.

Canvas breach investigations affecting universities, ransomware disruption at West Pharmaceutical and Foxconn, active exploitation of a critical cPanel vulnerability, and Europol’s latest cybercrime assessment headline this 48-hour roundup. Coverage also examines AI-assisted exploitation, leaked ransomware operator data, industrial control system security advisories, and evolving policy guidance on cyber resilience and frontier artificial intelligence.