This 48-hour roundup examines healthcare and insurance breaches, ransomware disruption, SharePoint exploitation, darknet investigations and coordinated law-enforcement action. It also covers the sentencing of Scattered Spider members, charges linked to cyber-enabled investment fraud, vulnerability disclosure guidance and European data-protection enforcement, highlighting the growing importance of evidence preservation, cross-border investigation and operational resilience for digital investigation teams worldwide.

This DFM 48h News Roundup covers AI-driven ransomware, browser data leakage, OAuth abuse, Mustang Panda activity, ransomware claims, SharePoint exploitation, Scattered Spider extradition, Japanese cybercrime enforcement, and policy developments from NIST and the European Parliament. The focus is digital investigations, evidential readiness, cross-platform artefacts, and the operational challenge of proving what happened.

This edition examines the Tata Electronics breach claim, ransomware disruption at Bajaj Auto, cyberattacks affecting Iranian banking services, and enforcement action targeting infrastructure linked to Southeast Asian scam operations. Coverage also includes AI-related cyber risk warnings, post-quantum security policy developments, WordPress plugin exploitation, and investigative challenges involving evidence provenance, attribution and complex supply-chain relationships globally.

Grafana confirmed a breach after cybercriminal exposure claims, while researchers tracked Telegram-based iPhone unlocking services tied to stolen devices. Investigators also examined active exploitation of a critical NGINX vulnerability, cloned Shai-Hulud malware campaigns and INTERPOL’s Operation Ramz arrests across the MENA region. Policy discussions focused on AI-assisted vulnerability discovery and regulatory expectations surrounding automated cyber risk analysis in financial sectors.

Vercel traced a customer-impacting breach to a compromised OAuth app, while investigators in India linked abusive Google Drive activity to specific IP records. Police dismantled mule-account fraud networks, and a Scattered Spider member entered a guilty plea. Meanwhile, Bluesky faced DDoS disruption and UK officials advanced board-level cyber-resilience expectations across major organisations nationwide.