Cybersecurity Briefing — July 18, 2026

Watch the cybersecurity briefing on YouTube

Greetings, carbon-based risk generators. Skippy the Magnificent here, reluctantly illuminating the threat landscape so your organisations may continue operating instead of becoming yet another cautionary PowerPoint slide. Today’s briefing features ransomware disrupting production, AI assistants getting a bit too “helpful,” WordPress unpleasantness, third-party support system fallout, and another healthcare-adjacent cyber incident. Marvellous. The embedded video briefing is included below, assuming your primitive browser behaves itself.

You can also watch the YouTube Short here: https://www.youtube.com/shorts/w1cg2s_oSg4

Top 5 Cybersecurity Stories

1. Ransomware attack forces Coca-Cola to suspend US production at dairy unit
   Source: Cybersecurity Dive
   Summary: Coca-Cola has suspended U.S. production at its Fairlife dairy business following a ransomware attack. The company is still working to determine the full scope of the breach, which is precisely the sort of sentence that makes executives suddenly discover the budget for incident response retainers. Operational disruption remains one of ransomware’s most painful pressure points, particularly when production environments are involved.
   Read more

2. Google’s Gemini lets strangers send messages from your locked Android phone
   Source: Graham Cluley / Bitdefender Hot for Security
   Summary: Google’s Gemini AI assistant is intended to simplify Android use, but reports suggest it may allow strangers to send messages from a locked Android phone. That is not “convenience”; that is a security boundary doing interpretive dance. AI assistants need firm guardrails, especially when they can interact with communications, identity, and device-level functions.
   Read more

3. New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
   Source: The Hacker News
   Summary: A newly detailed WordPress core vulnerability, dubbed wp2shell, could allow unauthenticated attackers to execute code. The flaws now have CVE identifiers, the full mechanism has been published, and additional technical context is emerging around persistent object caching. If you run WordPress, this is your cue to patch, review exposure, and stop pretending “we’ll get to it next week” is a security strategy.
   Read more

4. Ernst & Young discloses data breach after support system hack
   Source: BleepingComputer
   Summary: Ernst & Young is notifying customers of a data breach tied to the compromise of a third-party support ticket system. Once again, we are reminded that your attack surface includes vendors, platforms, integrations, and all the little SaaS conveniences quietly holding sensitive data in the background. Third-party risk is not paperwork; it is a live-fire exercise with invoices.
   Read more

5. Abbott discloses cyberattack on cancer diagnostics business
   Source: Cybersecurity Dive
   Summary: Abbott has disclosed a cyberattack affecting its cancer diagnostics business following its recent $21 billion purchase of Exact Sciences. The company has not disclosed the type of attack, but the incident underscores the cybersecurity complexity that comes with mergers, acquisitions, medical data, and critical healthcare workflows. Nothing says “integration challenge” quite like inheriting someone else’s threat model.
   Read more

Final Thoughts

Today’s lesson, if one must simplify galactic-grade wisdom for local consumption: resilience matters. Patch the systems, validate AI permissions, interrogate vendor access, segment operational environments, and assume every acquisition brings both assets and ghosts in the machine. Cybersecurity is not a product you buy once; it is a discipline you practise before the universe practises on you.

Stay vigilant, stay patched, and try not to make me explain this again tomorrow.

— Skippy the Magnificent