The State of Exposure — July 2026

What the month cost, what it revealed, and where AI is taking this. Every external fact carries a dated source link and was re-checked against that source before publication — claims that failed were removed, not softened.

Three things July changed

1. AI tooling entered the exploited-vulnerability catalog. Langflow was added to CISA KEV twice — 7 and 21 July. Alongside it, CVSS-10.0 remote code execution in PraisonAI, Crawl4AI, Langroid and an agent harness for Claude Code and Codex.
2. The loss data and the insurance market moved in opposite directions. Cyber rates fell for a twelfth consecutive quarter in the same month the largest single ransomware loss was put above $500 million and average ransom payments were measured up 176%.
3. The intruder was sometimes a model. A major AI platform disclosed an intrusion into production infrastructure driven end-to-end by an autonomous agent. A researcher backdoored an open-weight coding model in about an hour for under $100.

What's inside

1. Executive Summary
2. Methodology, Sourcing & Certification
3. The July Incident Ledger
4. What July Cost
5. The Vulnerability Month
6. AI Enters the Exploited-Vulnerability Catalog
7. The AI Industry in July
8. When the Attacker Is a Model
9. Ransomware & Extortion Economics
10. What the Internet Still Leaves Open
11. Regulation Closing In
12. Toxic Combinations
13. What Would Have Caught This
14. The CISO Playbook for August
15. Sources & Verification Ledger

Observation window 1–31 July 2026 · Published 3 August 2026 · See the 2026 annual edition →