This edition examines how investigators reconstruct autonomous AI activity, validate regional data breaches, trace cyber-enabled fraud and disrupt criminal infrastructure. It also covers active SharePoint and GlobalProtect exploitation, ransomware claims, phishing-platform seizures and emerging governance controls for powerful cyber models. The roundup highlights the evidence, attribution and cross-border coordination challenges shaping current digital and cyber investigations worldwide across multiple jurisdictions.

This 48-hour global roundup examines ransomware disruption at Fairlife, attacks affecting Ecopetrol and Kenya’s presidency website, newly exploited WordPress vulnerabilities, telecommunications fraud, cryptocurrency scams and preparations for EU Cyber Resilience Act reporting. The edition highlights the growing need for coordinated evidence preservation across cloud platforms, manufacturing systems, digital services, financial networks and third-party infrastructure worldwide during complex cross-border cyber investigations.

European Commission contained suspicious activity against its device management platform, while reports highlighted CERT-EU indicators on infrastructure. Microsoft warned of active exploitation of SolarWinds Web Help Desk flaws. Singapore’s telco sector investigated an alleged state-linked intrusion as Winter Olympics services faced disruption attempts. UK authorities examined cyber-sanctions compliance and NIS bill progress, and Substack and Coupang disclosed user data exposure.

Over the past 48 hours, defenders saw OT hardening guidance, fresh ICS advisories, and reports of active FortiSIEM exploitation. Hospitals and travel services faced disruptive incidents and data exposure, while investigators tracked themed malware and money-mule networks. Standards bodies advanced AI security and payment software assurance, signaling tighter audit expectations. Prioritize patching, segmentation, logging choke points, and evidence-ready reporting today.