This 48-hour DFM Global News Roundup covers cyber-fraud investigations, cloud hacking, AI containment failures, financial-sector vishing, port disruption and logistics data exposure. It also examines active TeamCity exploitation, web-cache research, ransomware sentencing, digital-arrest fraud and evolving platform and telecom policy, with an editorial focus on evidential integrity, attribution discipline and the value of independently corroborated investigative evidence across global jurisdictions.

Canvas breach negotiations, Foxconn ransomware disruption, malicious RubyGems packages and Microsoft’s May patch cycle dominated the latest Digital Forensics Magazine roundup. Investigators also tracked prolonged compromise exposure at a UK water provider, regulatory findings affecting Dutch healthcare security practices, and FTC guidance following education-sector data theft claims. The reporting highlights pressure on evidence preservation, attribution accuracy and cross-platform investigative coordination.

Australia’s ACSC released Azul, an open-source malware analysis tool, as defenders tracked vishing-driven access at Optimizely and extortion claims hitting Wynn Resorts and Air Côte d’Ivoire. Researchers detailed a GitHub Copilot prompt-injection chain and an NPM supply-chain campaign dubbed Sandworm_Mode. Spain arrested Anonymous Fénix suspects, while U.S. Treasury sanctioned a bulletproof hosting provider. NIST updated CSF guidance; CarGurus disclosed breach.