DigitalForensicsMag

📢 Nominations open for the 2026 US OSPAs Recognising excellence across the security profession from leadership and innovation to frontline performance. 🏆 Winners progress to Global OSPAs 📅 Deadline: 9 June 2026 📍 Awards at GSX Atlanta Read more: digitalforensicsmagazine.com/2026_us_cyber_…

48h Cybersecurity & DFIR Roundup • Trivy repo compromise exposed CI/CD risk • Citrix warned on NetScaler memory leak CVE-2026-3055 • DOJ jailed a broker tied to Yanluowang access Full briefing: digitalforensicsmagazine.com/news-roundup-2…

DFM Issue 57 is out now. • Court-admissible gait recognition • AI & LLMs in DFIR workflows • Scheduled ransomware attack tactics Read now: digitalforensicsmagazine.com #DFIR #DigitalForensics #CyberSecurity

48h Cybersecurity & DFIR Roundup • Google: attacker handoff fell to 22 seconds • Trio-Tech disclosed ransomware at its Singapore unit • Europol: 373,000 dark web sites shut down Full briefing: digitalforensicsmagazine.com/news-roundup-2…

48h News Roundup • CISA pushed Intune hardening after the Stryker breach • Russian activity was tied to a Zimbra breach and iPhone targeting in Ukraine • Europol shut 373,000 dark-web sites as CISA flagged SharePoint exploitation Full briefing: digitalforensicsmagazine.com/news-roundup-2…

48h News Roundup • Intuitive disclosed a phishing-linked breach of internal business apps • CISA flagged exploited Wing FTP activity as GitHub Python repo compromise fallout widened • INTERPOL warn AI-enhanced fraud is scaling globally Full briefing: digitalforensicsmagazine.com/news-roundup-1…

48h News Roundup • Poland’s nuclear centre attack; Albania suspends email • FBI tracks victims in Steam games; DOJ alleges responder assisted BlackCat • SocksEscort dismantled; INTERPOL seizes 45,000 malicious IPs Full briefing below: digitalforensicsmagazine.com/news-roundup-1…

48h News Roundup • Microsoft - 93 flaws & CISA publishes Siemens SIDIS advisory • Stryker manufacturing disruption cyberattack; Albania’s parliament suspended email • INTERPOL - 45,000 malicious IPs; Treasury sanctioned DPRK fraud Full briefing below digitalforensicsmagazine.com/news-roundup-1…

48h News Roundup • Microsoft fixed 79 flaws, including 2 disclosed zero-days • SAP patched critical NetWeaver & FS-QUO bugs; Ivanti exploitation surfaced • Loblaw disclosed a customer breach; ENISA issued package-manager guidance Full briefing below: digitalforensicsmagazine.com/news-roundup-1…

48h News Roundup • ACSC warned - active Cisco SD-WAN exploitation. • U.S. suspected China-linked breach of an FBI surveillance network. • LeakBase and Tycoon 2FA dismantled as LexisNexis & TriZetto major exposures. Full briefing below 👇 digitalforensicsmagazine.com/news-roundup-9…

48h News Roundup • CISA added five exploited flaws to KEV as Cisco warned more Catalyst SD-WAN bugs are under active attack • Europol in coordinated anti-cybercrime action • Passaic County malware outage, LexisNexis data breach Full briefing below 👇 digitalforensicsmagazine.com/news-roundup-6…

48h News Roundup • UK NCSC urges increased monitoring as Middle East tensions rise • CISA flags active exploitation of VMware Aria Operations command-injection flaw • University of Hawaii data theft impacting 1.2M individuals Full briefing below digitalforensicsmagazine.com/news-roundup-4…

48h Cybersecurity & DFIR Roundup • CISA refreshed RESURGE IoCs for Ivanti edge hunting • Juniper flagged a critical PTX router takeover vulnerability • Iranian apps hit after strikes; UH Cancer Centre SSNs exposed (up to 1.15M) Full briefing below 👇 digitalforensicsmagazine.com/news-roundup-2…

48h Cybersecurity & DFIR Roundup • NSA/NHS urge hunting for actively exploited Cisco Catalyst SD-WAN flaws • Odido says attackers began publishing stolen customer data • DOJ reports $580m+ crypto freezes tied to SE Asia scam centres Full briefing: digitalforensicsmagazine.com/news-roundup-2…

48h News Roundup • ACSC open-sources “Azul” malware analysis at scale • Optimizely confirms vishing-led access; Wynn and Air Côte d’Ivoire extortion • GitHub Copilot prompt-injection chain & “Sandworm_Mode” NPM supply-chain campaign Full briefing: digitalforensicsmagazine.com/news-roundup-2…

48h News Roundup • Ransomware at University of Mississippi; Advantest incident in Japan • CISA flagged BeyondTrust CVE-2026-1731; Grandstream VoIP phones root RCE • PayPal data exposure - app error; Android AI leaked ~2M user uploads Full briefing: digitalforensicsmagazine.com/news-roundup-2…

48h News Roundup • Unit 42: exfiltration in as little as 72 minutes across 750+ IR cases • Figure Technology Solutions breach linked to leaked ~967k user records • Active exploitation reported for Dell RecoverPoint for VMs zero-day Full briefing below digitalforensicsmagazine.com/news-roundup-2…

48h News Roundup • China-linked actors exploited a Dell RecoverPoint zero-day for ~18 months • CISA added an exploited Chrome vulnerability to the KEV list • YouX breach escalated with customer ID documents in the alleged dataset Full briefing below digitalforensicsmagazine.com/news-roundup-1…

48h Global News Roundup • Chrome CVE-2026-2441 patched after in-the-wild exploitation • GreyNoise: one IP drove 83% of recent Ivanti RCE attempts • Canada Goose leak claim + Odido customer-system exposure fallout Full briefing below digitalforensicsmagazine.com/news-roundup-1…

48h News Roundup CISA - 4 exploited CVEs; BeyondTrust pre-auth RCE exploited in the wild; Odido data leak; SmarterTools ransomware on an unpatched VM; UK ICO publishes complaints-handling guidance; NIST drafts smart manufacturing guide. Full briefing: digitalforensicsmagazine.com/news-roundup-1…