Taiwan recorded 726 government cyber incidents while Singapore police expanded cross-border scam investigations and SIM-fraud prosecutions. Researchers traced malicious packages across npm, PyPI and Composer ecosystems, and investigators examined a breach affecting IBM’s Italian subsidiary. The roundup also covers GitHub workflow compromises, calendar-phishing evidence collection, and new npm publishing controls intended to strengthen software supply-chain accountability across developer environments globally.