This edition examines the cyberattack affecting France’s national statistics department, disruption following a major Delhi data centre fire, supplier-targeted attacks against education technology providers, Operation Endgame malware infrastructure takedowns, newly exploited vulnerabilities added to CISA’s KEV catalogue, and continuing software supply-chain risks requiring stronger evidence preservation, dependency mapping and investigative readiness across interconnected digital environments.

This 48-hour roundup covers fake Maine breach-portal filings, GitHub metadata abuse linked to Shai-Hulud variants, Sri Lankan scam-network raids, Indian cryptocurrency fraud tracing, claimed Novo Nordisk and Foxconn data theft, CISA and CERT-In vulnerability warnings, US domain seizures for AI-generated abuse, and UK and FTC policy signals on age assurance and imposter scams across public, platform and enforcement evidence streams.

Investigators tracked unauthorized access to a Gaza aid registration platform, examined an npm supply-chain compromise affecting 36 packages, and assessed exploitation of a Magento cache flaw. Authorities disrupted scam infrastructure tied to Southeast Asian compounds, researchers exposed Gemini notification-based manipulation, while policymakers reviewed AI security risks and critical infrastructure resilience. Additional inquiries covered healthcare data exposure, forged identity networks, globally.

Taiwan recorded 726 government cyber incidents while Singapore police expanded cross-border scam investigations and SIM-fraud prosecutions. Researchers traced malicious packages across npm, PyPI and Composer ecosystems, and investigators examined a breach affecting IBM’s Italian subsidiary. The roundup also covers GitHub workflow compromises, calendar-phishing evidence collection, and new npm publishing controls intended to strengthen software supply-chain accountability across developer environments globally.

OpenAI rotated certificates after the TanStack npm supply-chain compromise, while Foxconn resumed operations following a ransomware incident claimed by Nitrogen. Cisco warned of active exploitation against critical SD-WAN infrastructure, and investigators examined breaches affecting Canvas and Nvidia GeForce NOW partners UK cyber sector analysis and ENISA CVE authority expansion highlighted dependence on evidence handling, vulnerability governance and investigative capability globally.