Loblaw Data Breach Impacts Customer Information

Multiple SecurityWeek reports (Mar 13–15, 2026) cover a range of active incidents and notable security developments: a Loblaw customer data breach exposing names, email addresses and phone numbers; a reported critical, unauthenticated HPE AOS‑CX vulnerability that can be exploited remotely to reset admin passwords; a phishing-driven Starbucks employee portal breach impacting hundreds; Iran‑linked threat actors expanding operations against US and regional targets (including a disruptive attack on Stryker that abused endpoint management tooling to wipe devices); additional stories include an N8n