Australian police exposed Cambodian scam scripts, Meta alleged renewed NSO-linked targeting, and investigators tracked cloud-theft and payment-skimming campaigns. A supply-chain worm hit npm packages, critical flaws affected Gogs and UniFi systems, and multinational enforcement actions disrupted scam infrastructure. Policy developments included European technology sovereignty initiatives and updated cloud-security guidance influencing evidence preservation and cross-border investigations.

Google patched an in-the-wild Chrome zero-day while GreyNoise tied most Ivanti RCE probing to a single bulletproof-hosted IP. Canada Goose investigated a 600k-record leak claim as Dutch telco Odido faced exposure fallout. Police in Thailand and India targeted mule accounts, and the EDPB addressed spyware abuse. PCI SSC opened comments and CERT-EU issued a CTI framework for EU institutions today.