
Editorial ranking puts ServiceNow first among 2026 GRC platforms
Scores are research-based, not lab results, and adoption ergonomics carries 25% of the weight.
25 stories, newest first · one card per story

Scores are research-based, not lab results, and adoption ergonomics carries 25% of the weight.
The feature is generally available with the platform and uses existing Jira or ServiceNow tickets.

The standalone product inventories certificates, TLS, keys and code, then opens ServiceNow tickets for remediation.
A ChatGPT integration can act on ServiceNow records; Codex, security and voice features are mostly scheduled for 2027.

Researchers say standard Email-to-Case and Flows can reach agent actions without a misconfiguration.
Cybercriminals are disrupting building systems, from French grocery refrigeration to a Canadian hospital, to extort victims with physical harm.
ServiceNow launched AI Passport, a runtime credential that limits what enterprise AI agents and MCP servers may do.

Wiz adds Backstage sync, dynamic discovery, network mapping, and posture policies to Service Catalog.
ServiceNow AI outlined AutoSynthData, a system for generating training data for enterprise AI agents.

Canada's Cyber Centre warns that multiple ServiceNow AI Platform versions need September 2026 security updates.

ServiceNow patched five AI Platform flaws, including critical unauthenticated SQL injection, with no known exploitation.

ServiceNow patched five AI Platform flaws, including critical unauthenticated SQL injection and missing authorization.

Aclif launched an agent CLI framework giving AI agents one grammar and canonical names to operate SaaS platforms like Salesforce and ServiceNow.
Microsoft researchers observed a BEC invoice scam sending 1M+ AI-assisted emails impersonating executives and ServiceNow to request ~$50,000 payments.

A BEC campaign sent over one million fake CEO invoice emails, mostly to US firms, urging ~$50,000 ACH transfers to attacker accounts.

Analysis argues ServiceNow's $7.75B Armis acquisition and AI-driven consumption pricing are reshaping its ITSM platform amid SaaS market anxiety.

Microsoft tracked a million-message AI-assisted BEC campaign impersonating executives with fake ServiceNow invoices to steal ~$50,000 ACH payments.

Microsoft tracked a campaign of over one million AI-crafted CEO-impersonation emails seeking ~$50,000 ACH payments with fabricated ServiceNow invoices.

Horizon3.ai customer story details Virginia Tech automating external pentesting via NodeZero's GraphQL API with GitLab and ServiceNow integration for remediation tracking.
Canada's Cyber Centre relays ServiceNow advisories affecting Xanadu, Yokohama, Zurich and Australia releases, urging administrators to patch.

ServiceNow patched four AI Platform flaws, including three pre-authentication CVSS 10.0 issues enabling unauthenticated code execution, SQL injection, and privilege escalation.

A weekly bulletin aggregating short security updates, including the City-Forum data-theft campaign, a ShipMonk breach, a Cursor CLI flaw, and GhostJacking AI attacks.

Reco tracks the City Forum campaign: one Contabo VPS has scraped Salesforce and ServiceNow guest portals across finance, telecom and public sector since March 2025.

Weekly digest: exploited Metabase zero-day breached Framework; Salesforce/ServiceNow portals read for 17 months; Microsoft patched 400+ flaws.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views