RF Wave

Nutex Health breached and more - Aug 30, 2026

Nutex Health breached and more - weekly security news and updates roundup for Aug 23-30, 2026

  • vulnerability
  • data breach
  • Nutex Health
  • Boston Scientific
  • LACMA
  • ATF
  • Manchester Airports Group
  • Hasbro
  • McKesson
  • Zimbra
  • miniOrange
  • Calix
  • Gitea
  • Ubiquiti
  • Microsoft
  • Citrix
  • PaperCut
  • ServiceNow
  • GiveWP

Hospital operator Nutex Health has confirmed they were victim of a data breach

The company has engaged external cybersecurity experts to investigate, and has not released information on what types of data were exposed

This Week’s Updates

Breaches

  1. LACMA discloses a breach from last year that exposed Social Security numbers and medical data
  2. Boston Scientific says a cyberattack disrupted order processing and IT systems worldwide
  3. ATF confirms a “major incident” after the Qilin ransomware gang claimed a breach
  4. Manchester Airports Group confirms hackers stole travelers’ data, including Wi-Fi sign-ups
  5. Hasbro discloses a data breach exposing employees’ personal and financial information
  6. McKesson discloses a breach after ShinyHunters claims theft of patient data

Vulnerabilities

  1. CISA orders federal agencies to urgently patch an actively exploited Zimbra Collaboration Suite flaw
  2. Hackers exploit two critical auth bypass flaws in the miniOrange WordPress SSO plugin, both already patched
  3. Researchers disclose an unauthenticated Calix router flaw, tracked as CVE-2026-75501, that exposes internal devices
  4. Attackers have breached over 270 Zimbra servers by exploiting the actively targeted ZCS vulnerability
  5. CISA confirms active exploitation of a critical Gitea code injection flaw already fixed in version 1.27.1
  6. Ubiquiti patches three maximum severity vulnerabilities exploitable without authentication
  7. Hackers begin chaining two Microsoft SharePoint vulnerabilities after a proof-of-concept exploit is published
  8. CISA orders federal agencies to patch an actively exploited Citrix NetScaler remote code execution flaw
  9. PaperCut warns that a zero-day flaw in its NG and MF print software is being actively exploited
  10. ServiceNow patches three maximum severity AI Platform vulnerabilities enabling code injection and privilege escalation
  11. A maximum severity GiveWP WordPress plugin flaw allowing remote code execution is patched in version 4.16.7.2
  12. PaperCut releases a second emergency patch after researchers bypass its initial fix for exploited flaws