July 2016: A perfect vulnerability storm