July Highlights — Resilience, fraud industrialisation and Europe’s payments shift

July’s most important stories showed cyber and financial risk becoming more interconnected. UK regulators began direct oversight of major cloud and technology providers serving finance, while the ECB moved the digital euro closer to operational testing. At the same time, large-scale fraud operations demonstrated how social engineering is organised across borders, and critical-infrastructure incidents exposed the consequences of insecure operational technology. Ransomware disrupted physical production at fairlife, a major Australian utility disclosed a large customer-data breach, and active exploitation of enterprise PLM software reinforced the importance of post-patch compromise hunting. The month’s strategic message is clear: resilience now depends on dependencies, identity and recovery capability as much as perimeter defence.