Microsoft’s October Patch Tuesday, new CISA KEVs, and Oracle’s emergency ERP fixes headline a high-intensity 48-hour cycle. Law enforcement advanced with major crypto-fraud indictments and the UK ICO’s £14 million Capita fine. Global advisories from the NCSC and ISO refreshed defence and privacy standards, underscoring the convergence of regulatory accountability, ERP exploitation risk, and industrial system resilience.

Oracle E-Business Suite zero-day (CVE-2025-61882) is being actively exploited, prompting global CERT advisories and extortion attempts linked to Clop. Asahi resumes operations after a ransomware-driven week-long outage. CISA adds a Meteobridge flaw to KEV. Europol spotlights cross-border data access gaps, while ETSI and ISO open security conferences shaping future compliance standards.

Over the past 48 hours, DFIR teams faced active Cisco zero-day exploitation, evolving macOS XCSSET tactics, and BRICKSTORM espionage. Aviation operations suffered vendor software disruption; Harrods reported a third-party breach. INTERPOL announced 260 arrests targeting sextortion scams, and the NCA detained a UK suspect. CISA issued an emergency directive; NIST published compliance updates. Organisations should prioritise patching and secure-boot verification.

Global cyber events dominated the past 48 hours, with Jaguar Land Rover’s production shutdown, Kering’s customer data breach, and Vietnam’s credit bureau hack impacting millions. Apple rushed an emergency ImageIO patch, while CISA flagged eight new ICS advisories. Law enforcement cracked scams in Singapore and Mumbai, as ENISA and OFSI advanced compliance guidance.

Over the past 48 hours, ransomware shut down a Texas school district, Panama’s finance ministry faced a major breach claim, and a Samsung zero-day was patched after active exploitation. Global law enforcement made phishing and child-exploitation arrests, while NIST closed comments on its DevSecOps draft, shaping future compliance expectations.