Cybersecurity
Where it stands
As of 20 July 2026
Attacks are landing on physical operations, and the damage people see is increasingly the shutdown a company chooses while it works out how far an intruder got.
Forces in tension
compromised logins now the top way ransomware gets in, ahead of software flaws
three firms disconnected their own systems in a week — milk, frozen food, taxi dispatch
genetic and medical records keep leaking; a settlement closes the case, not the exposure
record patch load, near triple the prior month, with flaws found faster than they are fixed
13 governments warned of long-running access to routers and edge devices
5,800 arrests across 97 countries, sanctions on a ransomware-linked VPN, the TfL pair jailed
What to watch
Whether the firms that disconnected their own systems this week can state a confirmed scope, or whether their notices stay at 'we cannot rule out'.
This board is the synthesized picture of 9 recent Cybersecurity editions. It describes where things stand — the forces, not a forecast, and never advice on what to do.