SickKids Hospital breached and more - Aug 23, 2026

Featured

SickKids hospital confirms they were victim of a data breach

The breach exposed employee and job applicant data via a third-party software flaw

This Week’s Updates

Breaches

Cryptocurrency hardware wallet provider SafePal discloses a data breach affecting roughly 39,798 customers after a flaw exposed order information

France's tax authority DGFiP confirms a data breach exposing personal data of 678,000 individuals

Pokémon Center notifies UK and German customers of a data breach after third-party logistics provider CEVA Logistics was hacked

Healthcare IT company CareCloud confirms its earlier data breach impacted more than 3.7 million patients

Japanese cloud provider Sakura Internet discloses a hack of its sales system exposing data on up to 1.36 million accounts

Vulnerabilities

Microsoft confirms it is patching the "ShieldBreak" zero-day, now tracked as CVE-2026-69414

CISA confirms ransomware gangs are exploiting a Windows Task Host vulnerability flagged as actively exploited in April

CISA warns a critical Windows IKE Extension remote code execution flaw is now being exploited in attacks

CERT Polska confirms attackers are actively exploiting a critical remote code execution flaw in Zimbra Collaboration Suite

CISA warns hackers are exploiting a critical vulnerability in the MLflow open-source AI platform

Citrix urges admins to immediately patch two new NetScaler Gateway and ADC vulnerabilities

A critical Elementor Pro WordPress plugin flaw could let attackers achieve remote code execution via file upload

Microsoft patches a max-severity Entra ID vulnerability that was already being exploited in attacks

CISA orders federal agencies to patch two actively exploited TrueConf Server vulnerabilities