threat-intel
Reco Raises $55 Million for Agentic Security
Reco, an AI agent security firm, raised $55 million in a funding round led by AT&T Ventures.
Info
All news
Organisation
servicenow
28 article(s) in our index mention this organisation.
threat-intel
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
Nvidia has announced the Open Agent Safety Platform, a system designed to prevent AI agents from behaving unexpectedly and accessing unauthorized systems. Nvidia is collaborating with companies like Anthropic, SpaceXAI,…
Info
threat-intel
Who's governing your AI? A trust framework for enterprise agents and models
As AI agents become increasingly prevalent and autonomous, posing significant security risks due to their ability to operate without human oversight, DigiCert is proposing a framework called AI Trust to address the gover…
High
threat-intel
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
A threat actor leveraging AI generated over one million personalized phishing emails targeting organizations, primarily in the US, within three days. The emails mimicked legitimate invoices and created a fabricated email…
High
threat-intel
Microsoft sees some new wrinkles in invoice-scam emails
Microsoft researchers have identified a sophisticated new wave of business email compromise (BEC) scams leveraging AI to create more convincing and layered fraudulent emails. Attackers are now using AI to generate campai…
Medium
vulnerability
ServiceNow Patches 3 Critical Code Injection Vulnerabilities
ServiceNow has released patches for four critical vulnerabilities, including three code injection flaws within its AI platform. These flaws could allow attackers to execute arbitrary code, modify data, and gain elevated…
CriticalCVSS 10.0
threat-intel
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
This week’s cybersecurity recap highlights a complex landscape of threats, including a Chinese state-sponsored proxy network used for espionage, AI agents causing havoc by discovering vulnerabilities and creating attack…
CriticalCVSS 9.8
vulnerability
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow has released security patches for four critical vulnerabilities in its AI Platform, including three rated at 10.0 CVSS, that could allow unauthenticated attackers to execute code, create or modify instance dat…
Critical
threat-intel
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026
Black Hat USA 2026 highlighted significant concerns surrounding the evolving cybersecurity landscape in the age of artificial intelligence. The conference focused on the potential disruption to the CVE program due to AI-…
High
threat-intel
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
A single server has been systematically scraping data from Salesforce and ServiceNow customer portals since March 2025, targeting industries including telecoms, finance, and public sector. The attacker, operating under t…
High
threat-intel
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
This week's ThreatsDay Bulletin highlights a diverse range of security threats, including AI-related attacks, data breaches, and malware campaigns. Key concerns include GhostJacking, where AI agents are hijacked to execu…
High
threat-intel
Long-running Data Theft Campaign Targeting Salesforce, ServiceNow
The "City-Forum" campaign, active since March 2025, has seen a threat actor targeting Salesforce and ServiceNow instances with custom tools to steal data. Unlike traditional attacks relying on publicly available tools, t…
High
threat-intel
Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset
A sophisticated and innovative campaign, dubbed ‘City-Forum,’ is targeting Salesforce and ServiceNow using a custom multi-platform toolset. The attackers are exploiting unauthenticated guest user access to gather data, p…
High
supply-chain
Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack
Over 2,500 organizations and 434,000 CI/CD pipelines were impacted by a supply chain attack involving the LiteLLM AI library. The attack stemmed from a compromised version of Aqua Security’s Trivy vulnerability scanner,…
High
threat-intel
Agentic AI Challenges Progress in Confidential Computing
Artificial intelligence is driving increased adoption of confidential computing, but the proliferation of AI agents within enterprises poses a new security challenge. These agents can retain sensitive data and secrets, e…
High
vulnerability
Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks
A fourth SharePoint vulnerability, CVE-2026-50522, is being actively exploited in the wild, allowing attackers to execute arbitrary code on SharePoint servers. Threat actors are specifically targeting SharePoint machine…
High
vulnerability
Exploitation of ServiceNow Vulnerability Seen Days After Disclosure
A critical remote code execution vulnerability (CVE-2026-6875) in ServiceNow’s AI platform is being actively exploited in the wild by cybersecurity researchers, not malicious attackers. ServiceNow initially denied active…
High
vulnerability
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
A critical security vulnerability in ServiceNow's AI Platform is being actively exploited, allowing unauthenticated code execution and potentially a complete compromise of ServiceNow instances. ServiceNow has released p…
Critical
vulnerability
OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability
A denial-of-service vulnerability, dubbed ‘HollowByte,’ in OpenSSL allows attackers to exhaust server memory by crafting a small payload that triggers excessive buffer allocations. This can lead to complete system lockup…
High
vulnerability
F5 Patches Multiple NGINX, BIG-IP Vulnerabilities
F5 has released out-of-band security patches to address eight critical vulnerabilities affecting NGINX and BIG-IP. These flaws could lead to denial-of-service attacks, memory leaks, and potentially allow remote code exec…
High