Daylila
← All reports
Cybersecurity · week of 20 Jul – 26 Jul

Cybersecurity: 20 Jul – 26 Jul

Pressure climbed 3 points across the week, 66 to 69.

69

pressure at the week’s end, 0–100

+3

move across the week

7

editions published

481

sources read behind them

The arc · 7 days with a board

Cybersecurity pressure: 7 readings from 2026-07-20 to 2026-07-26. Started 66, now 69. Range 65 to 69.5467802026-07-20: 662026-07-21: 682026-07-22: 682026-07-23: 652026-07-24: 672026-07-25: 662026-07-26: 6920 Jul26 Jul
Cybersecurity state over 7 days: 7 building. Most recent: building.

The band each day fell in.

No written analysis for this week

Everything on this page is measured from the week’s own boards and editions. The written read is added when the engine runs its report pass; a week without one still has its record.

What we said to watch

20 Jul Whether the firms that disconnected their own systems this week can state a confirmed scope, or whether their notices stay at 'we cannot rule out'.

The beat ended the week Under strain.

21 Jul Whether the first AI-run breaches stay rare experiments or harden into a cheap, repeatable playbook others copy.

The beat ended the week Under strain.

22 Jul Whether the SonicWall and SharePoint zero-days spread to more ransomware crews before organisations finish applying the fixes.

The beat ended the week Under strain.

23 Jul Whether regulators' fines and disclosure rules grow fast enough to make companies bear the cost of the breaches their users currently absorb.

The beat ended the week Under strain.

24 Jul Whether the KARR firmware fix actually reaches the millions of drivers who don't know the alarm is wired into their car.

The beat ended the week Under strain.

25 Jul Whether the gap between a patch shipping and a patch installed narrows, as AI shortens the time from a disclosed flaw to a working exploit.

The beat ended the week Under strain.

26 Jul Whether attacks that defeat MFA keep spreading, or phishing-resistant logins start to blunt them.

The beat ended the week Under strain.

The honest half. These are the markers the boards named at the time — kept on the record whether or not they turned out to matter.

The board on Monday, and the board at the end

Opened

20 Jul
  • Stolen logins 84
  • Operational shutdowns 79
  • Data that can't be reissued 74
  • Known-flaw backlog 67
  • Footholds in infrastructure 61
  • Enforcement reach 33

Ended

26 Jul
  • Zero-day exploitation 85
  • Identity attacks 80
  • Data breaches 77
  • Ransomware churn 70
  • AI-boosted attacks 64
  • Coordinated takedowns 36

Both boards exactly as they were written at the time — not a diff. The engine names the forces fresh every morning, so "The cheap-yen gap" on Monday and "Money leaving the dollar" on Friday may well be the same pressure under different words. Comparing the labels would measure the labels; comparing the two boards yourself is the honest version.

The week’s editions · 7

The same week, another beat