Volt Typhoon rebuilt Silent Train relay chains since late 2023
Black Lotus Labs says chains were rebuilt in under two minutes and hundreds of victims were notified.
84
Vendor
ServiceNow
- Mentions · 7d2
- Mentions · 30d6
- All mentions23
- First seenAug 12, 2026
- Last mentioned2d ago
Timeline
23 articles · newest firstOpenAI and ServiceNow expand partnership across enterprise workflows
A ChatGPT integration can act on ServiceNow records; Codex, security and voice features are mostly scheduled for 2027.
46
Cybercrims go beyond stealing data to attack physical building systems
Cybercriminals are disrupting building systems, from French grocery refrigeration to a Canadian hospital, to extort victims with physical harm.
76
ServiceNow gives AI agents a passport, and limits on what they can do
ServiceNow launched AI Passport, a runtime credential that limits what enterprise AI agents and MCP servers may do.
40
What’s New in Wiz Service Catalog: Smarter Discovery, Governance, and Service-Level Context
Wiz adds Backstage sync, dynamic discovery, network mapping, and posture policies to Service Catalog.
27
AutoSynthData: Generating Training Data for Enterprise Agents
ServiceNow AI outlined AutoSynthData, a system for generating training data for enterprise AI agents.
24
ServiceNow security advisory (AV26-963)
Canada's Cyber Centre warns that multiple ServiceNow AI Platform versions need September 2026 security updates.
34
Critical ServiceNow Vulnerabilities Let Attackers Bypass Authorization – Update Now!
ServiceNow patched five AI Platform flaws, including critical unauthenticated SQL injection, with no known exploitation.
76
ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data
ServiceNow patched five AI Platform flaws, including critical unauthenticated SQL injection and missing authorization.
72
Microsoft sees some new wrinkles in invoice-scam emails
Microsoft researchers observed a BEC invoice scam sending 1M+ AI-assisted emails impersonating executives and ServiceNow to request ~$50,000 payments.
48
Hackers Impersonate CEOs in 1 Million Emails to Trick Employees Into $50,000 Payments
A BEC campaign sent over one million fake CEO invoice emails, mostly to US firms, urging ~$50,000 ACH transfers to attacker accounts.
45
How AI and cybersecurity are reshaping ServiceNow
Analysis argues ServiceNow's $7.75B Armis acquisition and AI-driven consumption pricing are reshaping its ITSM platform amid SaaS market anxiety.
45
Hackers Use AI-Assisted CEO Emails to Trick Finance Teams Into Sending $50,000 Payments.
Microsoft tracked a million-message AI-assisted BEC campaign impersonating executives with fake ServiceNow invoices to steal ~$50,000 ACH payments.
68
We've got one word for it, and it's usually the wrong one
Cisco Talos's Threat Source newsletter critiques 'burnout' terminology, describing four occupational injuries, and flags a UAT-10820 WebDAV stealer campaign at a Ukrainian government organization.
32
Protecting organizations from AI-assisted executive impersonation and invoice fraud
Microsoft tracked a campaign of over one million AI-crafted CEO-impersonation emails seeking ~$50,000 ACH payments with fabricated ServiceNow invoices.
55
ServiceNow security advisory (AV26-857)
Canada's Cyber Centre relays ServiceNow advisories affecting Xanadu, Yokohama, Zurich and Australia releases, urging administrators to patch.
40
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow patched four AI Platform flaws, including three pre-authentication CVSS 10.0 issues enabling unauthenticated code execution, SQL injection, and privilege escalation.
70
Cybersecurity jobs available right now: March 10, 2026
Help Net Security's roundup lists open cybersecurity roles at BioNTech, AIG, ServiceNow and others across Europe, the Middle East and Canada.
10
New infosec products of the month: August 2026
August 2026 roundup of security product releases from ServiceNow, Tanium, Snyk, F5, A10, Searchlight Cyber, Intezer, NETSCOUT, Tufin, and Abnormal AI.
16
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
A weekly bulletin aggregating short security updates, including the City-Forum data-theft campaign, a ShipMonk breach, a Cursor CLI flaw, and GhostJacking AI attacks.
30
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
Reco tracks the City Forum campaign: one Contabo VPS has scraped Salesforce and ServiceNow guest portals across finance, telecom and public sector since March 2025.
68
ScienceLogic delivers secure AI deployment and smarter IT operations with Skylar AI 2.5
ScienceLogic shipped Skylar AI 2.5 with sovereign, on-premises, and secure-cloud deployment options and expanded AIOps integrations for regulated industries.
22
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months
Reco tracks City-Forum, an actor abusing Salesforce and ServiceNow guest-user access from one IP for 17 months to enumerate portal data.
62
Related CVEs
by mentions- Unauthenticated SQL Injection in ServiceNow AI Platform (CVSS 9.3)
- Missing Authorization in ServiceNow AI Platform Allows Unauthenticated Data Exposure
- Unauthenticated Authorization Bypass in ServiceNow AI Platform (CVSS 8.7)
- Unauthenticated Data Tampering in ServiceNow AI Platform
- Authorization Bypass in ServiceNow AI Platform Lets Users Read Unauthorized Data
- CVE-2026-74820<1%10.0Unauthenticated SQL Injection in ServiceNow AI Platform
- CVE-2026-6876<1%10.0Unauthenticated Sandbox Escape Allows Code Execution in ServiceNow AI Platform
- CVE-2026-18885<1%10.0Unauthenticated Code Injection in ServiceNow AI Platform (CVSS 10.0)
- CVE-2026-18886<1%10.0Improper Access Control (Privilege Escalation) in ServiceNow AI Platform
- CVE-2026-68751%9.5Unauthenticated Remote Code Execution in ServiceNow AI Platform
Appears with
- ServiceNoworganization · 8
- Microsoftvendor · 5
- ServiceNow AI Platformproduct · 5
- Salesforce Experience Cloudproduct · 3
- Salesforcevendor · 3
- Microsoftorganization · 3
- ServiceNowproduct · 2
- ServiceNow Service Portalproduct · 2
- ShinyHuntersthreat actor · 2
- Recovendor · 2
- F5vendor · 2
- Canadian Centre for Cyber Securityorganization · 2
- Microsoft Defenderproduct · 2
- Cisco Catalyst SD-WANproduct · 1
- VaporVMorganization · 1
- Semperisorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.