Nutex Health breached and more - Aug 30, 2026

Featured

Hospital operator Nutex Health has confirmed they were victim of a data breach

The company has engaged external cybersecurity experts to investigate, and has not released information on what types of data were exposed

This Week’s Updates

Breaches

LACMA discloses a breach from last year that exposed Social Security numbers and medical data

Boston Scientific says a cyberattack disrupted order processing and IT systems worldwide

ATF confirms a "major incident" after the Qilin ransomware gang claimed a breach

Manchester Airports Group confirms hackers stole travelers' data, including Wi-Fi sign-ups

Hasbro discloses a data breach exposing employees' personal and financial information

McKesson discloses a breach after ShinyHunters claims theft of patient data

Vulnerabilities

CISA orders federal agencies to urgently patch an actively exploited Zimbra Collaboration Suite flaw

Hackers exploit two critical auth bypass flaws in the miniOrange WordPress SSO plugin, both already patched

Researchers disclose an unauthenticated Calix router flaw, tracked as CVE-2026-75501, that exposes internal devices

Attackers have breached over 270 Zimbra servers by exploiting the actively targeted ZCS vulnerability

CISA confirms active exploitation of a critical Gitea code injection flaw already fixed in version 1.27.1

Ubiquiti patches three maximum severity vulnerabilities exploitable without authentication

Hackers begin chaining two Microsoft SharePoint vulnerabilities after a proof-of-concept exploit is published

CISA orders federal agencies to patch an actively exploited Citrix NetScaler remote code execution flaw

PaperCut warns that a zero-day flaw in its NG and MF print software is being actively exploited

ServiceNow patches three maximum severity AI Platform vulnerabilities enabling code injection and privilege escalation

A maximum severity GiveWP WordPress plugin flaw allowing remote code execution is patched in version 4.16.7.2

PaperCut releases a second emergency patch after researchers bypass its initial fix for exploited flaws