This edition examines AI coding agents executing malicious GitHub content, Tata Electronics strengthening controls after a reported breach, expanding Klue-Salesforce victim reporting, insurance-sector cyber disruption, Operation Endgame malware infrastructure takedowns, and evolving supplier risk. Coverage also explores Cisco SD-WAN vulnerabilities, fraud website ecosystems and investigative practices for preserving provenance across increasingly complex digital environments worldwide.

This edition examines a Texas wildlife licensing data breach, the Klue supply-chain attack affecting cybersecurity firms, FortiBleed credential exposure, healthcare-sector incidents involving Australian Clinical Labs and SunDoctors, and coordinated action against Evil Corp and the SocGholish botnet. Coverage also includes active vulnerability exploitation, SaaS evidence challenges, policy developments, and investigative readiness considerations for organisations globally.

In the past 48 hours, defenders faced urgent patch mandates for Sitecore and SAP S/4HANA exploitation, while Google fixed two Android zero-days. Investigations revealed a Chess.com data breach and GhostRedirector SEO hijacks. Major disruptions hit Jaguar Land Rover, and policy shifts saw U.S. info-sharing reauthorization progress alongside EU and Czech regulatory actions.

Ransomware disrupted Sweden’s municipal IT and Pennsylvania’s Attorney General’s office, while attackers abused Velociraptor and VS Code tunnels for stealthy access. New threats include WhatsApp zero-click exploits, TamperedChef malvertising, Brokewell Android malware, and ScarCruft’s RokRAT espionage. Indian police dismantled trafficking-to-scam pipelines and online fraud rings, underscoring cybercrime’s human dimension alongside technical threats.