The 2 March 2026 DFIR news roundup covers a Europol joint cyber exercise testing evidence handling and cross-border takedown coordination across agencies; dormant edge-resident malware complicating forensic scoping; and new NIST NCCoE guidance on data classification supporting defensible breach scoping and eDiscovery. Items are directly relevant to DFIR teams, cybercrime investigators and compliance officers.