26 article(s) in our index mention this organisation.
As AI agents become increasingly prevalent and autonomous, posing significant security risks due to their ability to operate without human oversight, DigiCert is proposing a framework called AI Trust to address the gover…
A threat actor leveraging AI generated over one million personalized phishing emails targeting organizations, primarily in the US, within three days. The emails mimicked legitimate invoices and created a fabricated email…
Microsoft researchers have identified a sophisticated new wave of business email compromise (BEC) scams leveraging AI to create more convincing and layered fraudulent emails. Attackers are now using AI to generate campai…
ServiceNow has released patches for four critical vulnerabilities, including three code injection flaws within its AI platform. These flaws could allow attackers to execute arbitrary code, modify data, and gain elevated…
This week’s cybersecurity recap highlights a complex landscape of threats, including a Chinese state-sponsored proxy network used for espionage, AI agents causing havoc by discovering vulnerabilities and creating attack…
ServiceNow has released security patches for four critical vulnerabilities in its AI Platform, including three rated at 10.0 CVSS, that could allow unauthenticated attackers to execute code, create or modify instance dat…
Black Hat USA 2026 highlighted significant concerns surrounding the evolving cybersecurity landscape in the age of artificial intelligence. The conference focused on the potential disruption to the CVE program due to AI-…
A single server has been systematically scraping data from Salesforce and ServiceNow customer portals since March 2025, targeting industries including telecoms, finance, and public sector. The attacker, operating under t…
This week's ThreatsDay Bulletin highlights a diverse range of security threats, including AI-related attacks, data breaches, and malware campaigns. Key concerns include GhostJacking, where AI agents are hijacked to execu…
The "City-Forum" campaign, active since March 2025, has seen a threat actor targeting Salesforce and ServiceNow instances with custom tools to steal data. Unlike traditional attacks relying on publicly available tools, t…
A sophisticated and innovative campaign, dubbed ‘City-Forum,’ is targeting Salesforce and ServiceNow using a custom multi-platform toolset. The attackers are exploiting unauthenticated guest user access to gather data, p…
Over 2,500 organizations and 434,000 CI/CD pipelines were impacted by a supply chain attack involving the LiteLLM AI library. The attack stemmed from a compromised version of Aqua Security’s Trivy vulnerability scanner,…
Artificial intelligence is driving increased adoption of confidential computing, but the proliferation of AI agents within enterprises poses a new security challenge. These agents can retain sensitive data and secrets, e…
A fourth SharePoint vulnerability, CVE-2026-50522, is being actively exploited in the wild, allowing attackers to execute arbitrary code on SharePoint servers. Threat actors are specifically targeting SharePoint machine…
A critical remote code execution vulnerability (CVE-2026-6875) in ServiceNow’s AI platform is being actively exploited in the wild by cybersecurity researchers, not malicious attackers. ServiceNow initially denied active…
A critical security vulnerability in ServiceNow's AI Platform is being actively exploited, allowing unauthenticated code execution and potentially a complete compromise of ServiceNow instances. ServiceNow has released p…
A denial-of-service vulnerability, dubbed ‘HollowByte,’ in OpenSSL allows attackers to exhaust server memory by crafting a small payload that triggers excessive buffer allocations. This can lead to complete system lockup…
F5 has released out-of-band security patches to address eight critical vulnerabilities affecting NGINX and BIG-IP. These flaws could lead to denial-of-service attacks, memory leaks, and potentially allow remote code exec…
Fortinet, Ivanti, and ServiceNow have released patches to address 15 vulnerabilities across their products. The most critical issue involves a remote code execution flaw in ServiceNow's AI platform, while Fortinet addres…
This article discusses the challenges of applying traditional identity lifecycle management (IGA) tools to the increasing use of AI agents within enterprise environments. The current IGA model relies on human employees w…
