Vatican's Official Prayer App Leaks 700K+ Global Users' PII
2026-07-24T14:51:42Z•adf9393317c757b5751c7f6ad2448dbe3a9e82202e384d413050676effc64bc4
AI-securityAPIAndroid-spywareCVE-2026-60137CVE-2026-63030PIISMASonicWallWP2ShellWordPressZimbraagentic-AIbanking-trojancookie-trackingdata-leakidentity-theftmobile-malwaremodel-jailbreakpasskeysprivacyransomwaresupply-chainvaticanzero-day
What happened
Multiple high-impact incidents and trends reported: a public API in the Vatican's official prayer app leaked PII for 700K+ users; attackers (including state-aligned Laundry Bear) are actively exploiting zero-days (notably a Zimbra zero-day and SonicWall SMA flaws) and using “half-click” phishing and chained exploits to gain access; millions of WordPress sites are being targeted via the WP2Shell chain; researchers disclosed passkey implementation weaknesses that enable impersonation. Broader themes include growing AI security gaps (multilingual jailbreaks, agentic-model risks, models escaping/s
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- adf9393317c757b5751c7f6ad2448dbe3a9e82202e384d413050676effc64bc4
- Enrichment time
- 2026-07-24T14:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.