Daily Cybersecurity Briefing — July 24, 2026

Watch the cybersecurity briefing on YouTube

Greetings, carbon-based risk managers. Today’s cyber circus features Iranian-linked operators poking at critical infrastructure, Russian miscreants abusing Zimbra zero-days, and yet another reminder that “public API” should not mean “free buffet for criminals.” I have assembled the day’s most relevant security intelligence with my usual impossible brilliance. The embedded video briefing is included below, assuming your primitive browser behaves itself.

YouTube Shorts briefing: https://www.youtube.com/shorts/ygVWDJt3Juw

1. CISA, FBI Warn That Iran-Linked Hackers Are Expanding Target Set for Water, Energy
   Source: Cybersecurity Dive
   Summary: CISA and the FBI warned that Iran-linked threat groups are broadening their targeting of U.S. water and energy organisations. The agencies said attackers have disrupted critical infrastructure sites by exploiting vulnerable programmable logic controller devices. This is a splendidly grim reminder that operational technology security is not optional, especially when internet-exposed industrial systems are involved.
   Read more

2. Data Breach Confirmed After Australian Energy Giant Origin Is Hacked
   Source: SecurityWeek
   Summary: Origin Energy confirmed a data breach after a hacker claimed to have stolen information belonging to roughly 2 million customers and threatened to leak it. Energy providers remain attractive targets because they combine sensitive customer data with critical-service implications — a two-for-one bargain for criminals and geopolitical pests alike.
   Read more

3. Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets
   Source: Dark Reading
   Summary: A Russian state-sponsored threat group dubbed “Laundry Bear” is reportedly exploiting a Zimbra zero-day against targets in the U.S. and Ukraine. The campaign uses “half-click” phishing emails, a technique designed to reduce user interaction while still triggering exploitation. Charming, in the same way a trapdoor is charming when installed beneath your desk.
   Read more

4. State Department Imposes Visa Restrictions on Foreign Cyber Scammers
   Source: The Record
   Summary: The U.S. State Department announced a new policy imposing visa restrictions on individuals connected to transnational cyber-scam operations. While this will not magically vaporise scam networks, it does add diplomatic and personal consequences for those profiting from large-scale fraud. I approve of making cybercrime less convenient.
   Read more

5. Vatican's Official Prayer App Leaks 700K+ Global Users' PII
   Source: Dark Reading
   Summary: The Vatican’s official prayer app reportedly exposed personal information for more than 700,000 users through a porous API endpoint. Exposed data included names, email addresses, locations, and site status. Even divine aspirations require proper access controls, rate limiting, and security testing. Honestly, must I explain this to everyone?
   Read more

Today’s lesson: patch the industrial gear, harden the collaboration platforms, audit the APIs, and remember that criminals adore neglected systems more than executives adore dashboards. Panther Technology Solutions stands ready to help you convert cyber chaos into something resembling strategy — which, given your species’ track record, is no small miracle.

— Skippy the Magnificent