servicenow

Il fattore umano rappresenta ancora oggi il principale anello debole nella catena della sicurezza informatica, soprattutto quando si tratta di posta elettronica, abuso di identità e gestione impropria dei dati. Come identificare, misurare e ridurre, in modo continuativo e data-driven, le vulnerabilità scaturite dalle persone? L'analisi Il problema non è il fattore umano. Perché il modello cyber va ripensato Il nodo della cyber security non è la persona che sbaglia, ma un modello di sicurezza non allineato ai flussi di lavoro reali. Quando i processi sono complessi e poco usabili, la sicurezza viene aggirata invece di essere adottata. Ma anche la formazione deve cambiare

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, which Reco has named the City Forum campaign after a domain tied to the attacker's IP address, traces back to one server: 158.220.87.79, hosted on a commodity VPS through the German provider Contabo. Every request from that server carries the same fingerprint, the default user agent of Go's net/http library, which tells researchers the tool behind it is a compiled, purpose built program rather than anything run from a browser. Passive DNS shows the same domain pointed at that IP as far back as March 2025, and the server has not moved since. Targets identified so far span telecoms, banks and other financial services firms, enterprise software vendors including security and data privacy companies, and public sector portals, though Reco has not named individual organizations. What sets this campaign apart from prior Salesforce guest access abuse, including the widely reported activity attributed to ShinyHunters, is the range of surfaces it touches. Most known attackers in this space lean on Salesforce's older Aura framework, sending high volumes of guest requests to enumerate objects and page through records. This actor does that too, and Aura still accounts for the bulk of the traffic Reco observed, with one target logging over 560,000 events from the same IP. But the tool also reaches Salesforce's newer Lightning Web Runtime sites through the UI-API, a data layer that has no public write ups or known scanning tools associated with it, walking through API versions v56.0 through v66.0 in sequence. On top of that, the same server hammers a native ServiceNow Service Portal search endpoint, POST /api/now/sp/search, that carries almost no public documentation of its own. According to Reco's writeup, the common thread across every technique is the same underlying issue: a guest identity that was granted more access than the site actually needed to serve the public. Salesforce Experience Cloud sites and ServiceNow portals both maintain a persistent guest user that unauthenticated visitors execute as, and that user cannot be deleted, only restricted. If the guest profile can read a record, the record is effectively public, whether or not the site requires login to view it in a browser. The research lays out concrete detection steps for security and IT teams on both platforms. On Salesforce, defenders with Event Monitoring or Shield can pull AuraRequest and Sites log events and look for the Go-http-client user agent, the specific IP, and request paths containing /webruntime/api/services/data, alongside spikes in self registration attempts at /SiteRegister and /CommunitiesSelfReg. On ServiceNow, the transaction log table syslog_transaction can be filtered by source IP and by URLs starting with /api/now/sp/search, with guest created rows and unusual output length flagged as the clearest signal of a live sweep. Remediation, per the research, centers on tightening the guest profile rather than the endpoints themselves, since both the UI-API and the ServiceNow search endpoint are working as designed. On Salesforce, that means reviewing guest sharing rules, stripping unnecessary object and field level access from the guest profile, disabling self registration where it is not required, and turning off the Experience Builder setting that allows guest users to reach public APIs. On ServiceNow, the fix is mapping which search sources are exposed to public facing portals and auditing the Knowledge Base read criteria that decide what an anonymous search actually returns. Reco says the infrastructure behind the campaign is still active and the volume is climbing, and the firm has not attributed the activity to a specific named group. The full technical breakdown, including request signatures, sample queries, and a closer look at how the Service Portal search endpoint decides what to hand back to an anonymous caller, is available in Reco's writeup of the City Forum campaign. Security leaders weighing how much of their budget to put toward this kind of app exposure, versus other priorities competing for the same dollars, can find a planning framework in Reco's guide to AI security investment, which covers how to size budget, evaluate vendors, and build a business case for the board.

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: GitHub Dependabot malware alerts now cover eight ecosystems GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.io, or PHP Composer package has had no such warning, because GitHub’s malware detection only ever watched one ecosystem. That changed this month. Dependabot malware alerts, which had run on npm data alone, now draw on all eight ecosystems the moment a user turns malware alerts on. Dependabot itself already runs across more than 30 million repositories and 34-plus package ecosystems overall, which gives a sense of the scale the malware pipeline now has to operate at. An AI tool found 84 flaws in 5G network software and 23 of them still have no fix Researchers at Nanyang Technological University turned a set of AI agents loose on the software that runs 4G and 5G phone networks, and the agents came back with 84 security flaws nobody had reported before. Developers have confirmed 83 of them, and 81 now carry CVE numbers. Post-quantum migration gets harder when every user holds a key In this Help Net Security interview, Christopher Smith, CEO of Quantus, discusses what cryptographic inventories turn up in banks and hospitals, including default passwords and admin keys still held by former employees. A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months Most security stories start with something broken. This one starts with everything working as designed. Researchers at Reco have been tracking a campaign they call City-Forum, named after a domain registered in 2002, abandoned, and now resolving to a generic rented server from a German hosting provider. From that server, someone has been pulling records out of Salesforce and ServiceNow portals around the world. N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 To help customers fend off ongoing attacks, N-able released a second security hotfix for N‑central, its monitoring and management (RMM) solution popular with managed service providers (MSPs). Metabase zero-day exploited to access Framework customer data Framework, the San Francisco-based company that designs repairable and upgradeable laptops, has suffered a data breach after attackers managed to exploit a zero-day vulnerability in the Metabase business intelligence service. According to the notification sent to affected Framework customers, the attackers accessed names, email addresses, phone numbers, physical addresses, and login IP addresses, but not payment information or records related to orders. Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820) Microsoft’s August 2026 Patch Tuesday delivered security fixes for 400+ vulnerabilities, including one that has been exploited in zero-day attacks (CVE-2026-68820) and three that were publicly disclosed prior to the release of the patches. Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) A high-severity vulnerability (CVE-2026-20349) is being leveraged by attackers to temporarily interrupt the operation of Cisco firewalls, the company has confirmed. The flaw has been added to CISA’s Known Exploited Vulnerabilities catalog and needs to be remediated by US civilian federal agencies by August 14, 2026. Who will be the Stanislav Petrov in your organization? Recent reports of “rogue AI” systems hacking companies reminded Brian Honan, CEO, BH Consulting, of Stanislav Petrov. In 1983, Soviet computers falsely detected a US nuclear missile launch. Instead of trusting the system, Petrov applied human judgement and correctly identified it as a false alarm, potentially preventing nuclear war. That is why the recent incidents involving OpenAI and Hugging Face, Anthropic, Meta, and the UK’s AI Security Institute deserve the attention of CISOs and boards. 338 million attack simulations reveal the state of enterprise defense First, a bit of good news: Enterprise defenses are recovering. However, it’s a narrow recovery, with a twist. Today, organizations are better at stopping loud attacks but have barely moved the needle at all against the quiet ones. This data, and a lot more, comes straight from the newly published Blue Report 2026, the fourth annual comprehensive study from Picus Labs. Four corporate investigation mistakes organizations make under pressure In this Help Net Security video, Christine Gadsby, VP and Chief Security Advisor at BlackBerry, explains why corporate investigations go wrong before the forensic team arrives. The first hours matter more than leaders assume. Access gets granted, conversations start, and decisions get made that later affect chain of custody, privilege, and how regulators judge the process. How to report an AI Act violation in the EU The EU’s fight to regulate AI models entered a new chapter on 2 August 2026, when the European Commission’s AI Office and national authorities began enforcing the AI Act. It creates a common set of rules for AI systems used or sold in the EU, with the goal of encouraging innovation while protecting people’s safety and fundamental rights. Chainloop: Open-source evidence store and policy engine for the software supply chain Chainloop is an open source evidence store for the software supply chain. A command line tool runs inside a GitHub Actions, GitLab, Jenkins, or Dagger pipeline, picks up what the build produced, uploads those files to content-addressable storage, and references each one in a signed in-toto attestation. in-toto is a specification for recording who ran which step of a build, so the record can be checked afterward. Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users Microsoft is changing how Entra ID handles MFA for people who sign in with Windows Hello for Business (WHfB) or macOS Platform Single Sign-On (PSSO). The rollout reaches worldwide and GCC tenants starting early October 2026, with completion expected by late November. Cyberattack on Steam hardware shipper leaks names, addresses, and order data Video game publisher Valve is alerting customers in Europe to a data breach at CEVA Logistics, its Steam hardware shipping partner. Reports from affected customers began surfacing on social media earlier today, after Valve started sending out data breach notification emails. Previously unseen entry vector used to breach Polish energy plant The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a dedicated mobile network that a Distribution System Operator (DSO), the company running the local electricity grid, sets up with a mobile carrier. GPT-5.6-Cyber refuses security researchers’ requests far less often GPT-5.6-Cyber is a new OpenAI model built on GPT-5.6 Sol, trained to find zero-day vulnerabilities and build exploit chains, with fewer refusals on higher-risk, dual-use work. Model is available only through Daybreak Red, the higher tier of OpenAI’s vetted access program for cybersecurity professionals. Ransomware gangs don’t need control system access to disrupt industrial production Disrupting IT systems that support industrial environments can be enough to interrupt production, even when ransomware operators do not gain direct access to industrial control systems (ICS), according to Dragos. The company identified 1,140 ransomware incidents involving industrial organizations in the second quarter of 2026, up 12% from 1,020 in Q1. Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G Researchers have found that compromised or malicious SIM cards can issue commands to some smartphones and cellular-connected devices, allowing attackers to steal information, disrupt communications, downgrade connections to 2G, and in some cases execute code. Ready-made $500 kit puts a crypto scam within anyone’s reach A seller on a cybercrime forum is offering a ready-made scam kit for $500, complete with an admin panel that tracks victims, checks their crypto wallets for value, and inflates fake balances to squeeze out more money, Malwarebytes found. Split-second deepfake glitch blows digital certificate fraudster’s cover Spanish police have arrested a man in Murcia accused of using deepfake software to trick a certificate provider’s video identity checks in an attempt to obtain digital signatures he could use for financial fraud. Lazarus hackers pair fake job offers with Windows zero-day exploit The North Korea-linked Lazarus group is using fake job offers, trojanized PDF software and a Windows zero-day in attacks aimed primarily at the defense sector, Check Point researchers have found. Signal’s new security feature checks if your encrypted chats were tampered with Signal has introduced a feature called automatic key verification, giving users a new way to confirm that nobody has secretly interfered with their encrypted chats. 153GB of stolen credentials surface after LiteLLM supply chain attack A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce. Hudson Rock says it obtained and analyzed the archive, which contains 433,909 files, and attributed 118,829 CI runner dumps to 2,488 corporate domains. Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040) Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of proof-of-concept (PoC) exploit code by Rapid7. Tracked as CVE-2026-55040, the vulnerability was patched by Microsoft as part of its July 2026 Patch Tuesday updates. White House authorizes private US companies to hack foreign criminal networks President Trump signed a National Security Presidential Memorandum on August 12 allowing vetted private companies to run offensive cyber operations against foreign threat actors, under the control and oversight of the US government. Ukrainian police raid 94 fraudulent call centers, seize $2 million Ukrainian police have disrupted 94 fraudulent call centers during a nationwide operation that involved more than 400 searches and the seizure of thousands of computers, phones, and SIM cards. New Android malware relays bank cards to fraudsters while victims still hold them Group-IB researchers discovered WindRelay, a new Android malware built to capture live payment card data over NFC (Near Field Communication) and relay it to attackers in real time. WindRelay is paired with the SpyNote remote access trojan, which gives attackers remote access to a victim’s device. 71% of CISOs spend 10+ hours on board reports Boards want evidence that security controls and architecture reduce business risk, expressed in terms of resilience, consequence, and decision relevance. Translating technical findings into business language remains a major time burden for CISOs, who are calling for simpler data delivery, better frameworks, and better context. Pulse Security AI’s The CISO-Board Communication Gap report found that board members bring external information into discussions while many organizations still lack a formally defined cyber risk appetite. Product showcase: Enpass Password Manager breaks away from the proprietary cloud model Enpass is a password manager that stores passwords, passkeys, payment cards, identities, secure notes, software licenses, and other sensitive information in encrypted vaults. Vaults remain on the device or in a cloud storage service selected by the user. OpenAI locks down Astra over potential critical cyber capabilities OpenAI’s internal evaluation of its upcoming model, Astra, found significant advances in agentic coding and cybersecurity, leading the company to conclude that it cannot rule out the model reaching the critical capability level for cybersecurity under its Preparedness Framework. Anthropic to put AI in charge of reviewing Claude Code actions by default Anthropic will make auto mode in Claude Code the default for new sessions on Pro, Max, and Team plans starting August 14. Users who previously selected a different default may receive a one-time prompt asking whether they want to switch to auto mode. Your security vendor gets the frontier cyber model, you get the findings Selected red team specialists can now use OpenAI’s cyber models to find and exploit weaknesses in client applications and infrastructure. Those clients never get the models themselves. That split is the design of the Daybreak Cyber Partner Program, which OpenAI expanded on August 10: access to the underlying models stays with the approved partner and is not transferred directly to the customer. Locking your ssh-agent exposed local-only keys until OpenSSH 10.5 Lock your ssh-agent and it should sit there refusing to sign anything until you unlock it. In OpenSSH 10.4, locking it also switched off the check that tells the agent whether a request came from your own machine or arrived down a forwarded connection from a remote server. The fix shipped today in OpenSSH 10.5. AI deployments are stretching enterprise security to its limits CISOs and CTOs expect AI deployments to increase their organizations’ attack surface by an average of 14% over the next year. Nearly all lack visibility into AI deployments, and 90% are concerned about employees using unapproved AI tools outside formal oversight, according to NetFoundry’s 2026 State of Secure AI Access survey. PentestGPT: Open-source automated penetration testing agentic framework PentestGPT is an open-source penetration testing agent that points a large language model at a target and lets it work. In its default mode it runs recon, then exploit, then walkthrough, each stage feeding the next. Switch it to pentest mode and the stages become asset discovery, vulnerability identification, report. No human sits in the loop. Chrome’s anti-abuse protections block 7 billion unwanted Android notifications daily Google Chrome’s latest measures against abusive web push notifications include automatically revoking notification permissions for inactive and suspicious websites, helping reduce scams, phishing attempts, and other deceptive content. Wireshark 4.6.8 patches 28 security bugs, nine in file parsers Wireshark 4.6.8 fixes 28 security bugs in the protocol analyzer, and nine of them fire when someone opens a saved capture file. Those nine sit in file parsers, the code that reads a capture off disk before any dissection begins: pcapng, Endace ERF, Tektronix K12xx, BUSMASTER, Catapult DCT2000, Gammu DCT3, 3gpp phone logs, TTX Logger, and, on Windows only, Ixia IxVeriWave and Vector Informatik BLF. An attacker never has to touch your network for these. They only have to get you the file. Product showcase: Is this image real? Slop or Not investigates Slop or Not is an AI text and image detector for iPhone and Mac that runs entirely offline, with no account required. It uses on-device AI models powered by the Apple Neural Engine to detect AI-generated content. DDoS attacks hit record scale as 1 Tbps+ campaigns become more common DDoS attacks grew in scale during the first half of 2026, bringing larger traffic floods, shorter attack durations, and increasingly automated campaigns. Cloudflare’s H1 2026 DDoS Threat Report shows threat actors relying on multi-vector techniques and large-scale network-layer attacks to disrupt online services across multiple industries. 17 draft Cyber Resilience Act standards are open for comment A company selling a connected toy in Europe must show by the end of 2027 that the product meets the Cyber Resilience Act. The law states what manufacturers have to achieve and stops there, which leaves the toymaker to work out the technical detail alone. Seventeen draft standards, now open for comment, supply that detail. Weak IAM affects up to 98% of cloud environments Misconfiguration remains one of the leading threats to cloud environments because a single configuration error can result in public network access, unrotated keys, missing encryption, exposed services, and logging gaps. CISA now mandates baseline cloud configuration practices for US federal agencies. The hardest part of agentic AI may be rebuilding the business Organizations expect AI agents to change how work gets done, driving productivity and growth while allowing employees to focus on higher-value tasks. Few, however, have the processes and workflows needed to realize those benefits, according to Deloitte’s latest research. AWS Certificate Manager sets 2027 end date for email-validated certificate renewals AWS Certificate Manager (ACM) will phase out email validation for public certificates throughout 2027, ahead of the Certification Authority/Browser (CA/B) Forum’s March 15, 2028 deadline for ending email-based domain validation. OpenAI’s GPT-5.6 Sol runs up to 14× faster with Ultrafast mode OpenAI’s GPT-5.6 Sol on Ultrafast mode is available in limited preview to a select group of customers, launching first through the OpenAI API. The company says the service runs up to 14 times faster than Standard processing and generates up to 750 output tokens per second. Ultrafast is powered by Cerebras as part of the companies’ partnership on ultra-low-latency inference. Cybersecurity jobs available right now: August 11, 2026 We’ve scoured the market to bring you a selection of roles that span various skill levels within the cybersecurity field. Check out this weekly selection of cybersecurity jobs available right now. New infosec products of the week: August 14, 2026 Here’s a look at the most interesting products from the past week, featuring releases from A10 Networks, ScienceLogic, Searchlight Cyber, and SelectHub.

DataGrout helps enterprises control AI usage, governance and LLM costs SelectHub has announced the launch of DataGrout, its specialized AI research lab introducing an LLM inference optimization platform and AI governance solution for enterprises. DataGrout’s mission is to drive token reduction for agentic workflows, chatbots and AI tools, while equipping IT and FinOps leadership with a policy-driven, auditable LLM payload and cost monitoring system to track company-wide AI utilization. As enterprise users increase LLM usage through context-intensive chat sessions and coding tools such as Claude Code, Cursor and Replit, uncontrolled token waste and hidden API expenses are putting significant strain on corporate budgets. This is especially impactful as organizations also begin expanding agentic workflow deployments across diverse use cases such as customer service and sales outreach. DataGrout addresses this challenge through a unified connection layer that enables agents to securely access all enterprise applications with built-in dynamic context pruning, alongside a symbolic inference layer that reduces calls to the underlying LLM. Early tests have shown promising results with token reduction averaging 60% for data-intensive tasks involving ERP and CRM integration, without compromising workload accuracy. “Companies are flying blind into the AI era,” said Venkat Devraj, CEO at SelectHub. “Through DataGrout, IT and Finance teams gain precise token tracking and visibility into LLM consumption patterns and payloads, enabling leadership to clearly measure the value delivered by AI investments while systematically eliminating waste on a per LLM-call basis. Deterministic workloads are kept off the LLM entirely without users and developers having to manually segregate and route workloads. The net positive impact on the P&L is instantaneous.” The critical market need for tools that help IT and FinOps / AI Tokenomics teams audit and eliminate token waste is being echoed across enterprise leadership. Deepak Dodani, Chief Information Officer at global transportation management and freight audit firm AFS Logistics, noted: “The twin challenge for companies deploying AI is token economics and governance. Right now, most companies cannot accurately assess the extent to which their LLM resources are driving business value versus being drained by unnecessary or unauthorized side-projects. DataGrout’s premise in terms of reducing token waste while enabling visibility into LLM usage, is very timely.” Bharath Prabhakaran, Chief Digital Officer at University of Cincinnati, also emphasized the need for enterprise LLM usage tracking and agent governance: “Rampant LLM token usage has many CIOs and CFOs worried. AI line items can quickly become one of their fastest-growing operational expenses. Without visibility into LLM usage and token consumption metrics that show which teams and use cases consume the most tokens, forecasting ROI is nearly impossible. DataGrout endeavors to reduce token usage while increasing the transparency needed to reduce waste and prevent abuse.” DataGrout acts as a MCP gateway and control plane with agents connecting via its Conduit SDK or via MCP or JSON-RPC. DataGrout allows any third-party MCP server to be accessed through its platform, while also offering its own MCP servers for popular SaaS applications such as Salesforce, HubSpot, Oracle ERP, SAP, ServiceNow, Snowflake and QuickBooks. DataGrout can be connected to LLMs directly with companies bringing their own key, or via popular AI gateways such as Amazon Bedrock and Kong.

153GB of stolen credentials surface after LiteLLM supply chain attack A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce. Hudson Rock says it obtained and analyzed the archive, which contains 433,909 files, and attributed 118,829 CI runner dumps to 2,488 corporate domains. “We are leveraging this data for a global ethical disclosure effort,” Alon Gal, Hudson Rock’s co-founder and CTO, told Help Net Security. “We see this as an opportunity to help organizations respond proactively before threat actors weaponize the data publicly.” LiteLLM is an open-source proxy gateway that developers use to route requests to different AI models. The LiteLLM breach had its roots in an earlier compromise of Trivy, a popular open-source vulnerability scanner. On March 19, 2026, TeamPCP, a cybercriminal group that emerged in late 2025, used stolen credentials to publish a compromised version of Trivy. LiteLLM’s build pipeline installed Trivy automatically, giving the poisoned scanner read access to the runner environment and allowing the attackers to steal the project’s PyPI publishing tokens. Using those tokens, TeamPCP published two malicious LiteLLM releases, versions 1.82.7 and 1.82.8, to the Python Package Index on March 24. “The key takeaway is how supply chains have evolved to make a single upstream breach affect thousands of companies simultaneously. A window of roughly 40 minutes in which the LiteLLM dependency was hacked led to over 430,000 instances in which millions of secrets were harvested,” Gal said. Tracing exposed secrets back to their owners The dataset contains information linked to organizations including NVIDIA, Volkswagen, Microsoft, FedEx, S&P Global, John Deere, Epic Games, Orange, TomTom, BT Group, ServiceNow, Deloitte, and Siemens. Screenshots published with the research show AWS secret access keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys captured during pipeline execution. A trove of internal corporate secrets (Source: Hudson Rock) CloudSEK, working from a separate dataset built from about 434,000 stolen files, put the number of exposed organizations at close to 2,500. The company stressed that its figures reflect exposure rather than confirmed breaches. “I’ve confirmed the data is legit by the way, multiple victim orgs,” security researcher Kevin Beaumont said. “It contains a significant volume of sensitive content at orgs. It’s a massive supply chain breach due to poor AI security—not because AI is the threat, but teens can run circles around orgs obsessed with rushing out AI and poor DevOps security.” “Identifying the victims within this 153GB database presents a unique threat intelligence challenge. Accurate attribution requires looking past the surface level to analyze the actual infrastructure boundaries,” Hudson Rock noted. In one case, a leaked pipeline was tied to a committer email at SiriusXM, but infrastructure markers in the same dump, including a self-hosted GitLab instance at gitlab.adswizz.com, pointed to AdsWizz, a SiriusXM subsidiary. Hudson Rock said correct identification depends on “hard infrastructure markers rather than simple committer emails.” A large share of the dumped files have no obvious owner. According to Hudson Rock, some contain database passwords, third-party API keys, and cloud credentials without a company email address, custom domain, or internal server name that could identify the organization they came from. This means organizations may have exposed credentials in the dataset without knowing they are affected. Organizations urged to act before stolen data leaks Hudson Rock is urging organizations using AI proxy infrastructure, third-party CI/CD vulnerability scanners, or downstream AI packages to audit their environments for LiteLLM versions 1.82.7 and 1.82.8 and treat any secrets accessible to the LiteLLM environment as compromised. Organizations should also rotate cloud IAM keys and access tokens, review audit logs for anomalous activity dating back to March 24, and check for unauthorized .pth files and suspicious systemd services. “While we cannot disclose how we obtained this data, it is not leaked anywhere at the moment and is not circulating widely. This makes it a critical window of opportunity for companies to rotate keys and secrets before it eventually leaks, as is the natural cycle of a breach,” Gal added. Despite the scale of the breach, some organizations appear to be treating the exposure with less urgency than the findings warrant. “These creds date from about March. One of the orgs impacted told me they’d rotated them all and it’s a nothingburger, so I looked at their responsible disclosure policy, it allows trying creds, so I tried them all. Almost every one worked. Submitted report. One of the biggest US techcos,” Beaumont wrote. “This magnitude pushes us into a completely new world regarding the type of response required from the cybersecurity industry,” Gal concluded.

Update 8/14: Added statement from ServiceNow. An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. The data-theft campaign, dubbed City-Forum by SaaS security firm Reco, has been traced to a single server that has targeted multiple organizations worldwide. These organizations include telecommunications companies, banks and financial services firms, enterprise software vendors, security and data privacy companies, and public-sector portals. Reco says the attacks are ongoing, with activity continuing to increase. The City-Forum data theft attacks Reco says all of the attacks originate from the IP address 158.220.87.79, hosted by German VPS provider Contabo, and almost always use the default Go-http-client/1.1 user agent when downloading data. This IP address is associated with the city-forum.com domain, which has resolved to the server since at least March 2025, indicating that the infrastructure has remained in place for more than a year. The researchers say these combined IOCs have been seen across almost all attacks targeting Salesforce and ServiceNow environments in this campaign. "The same fingerprint appears against both Salesforce and ServiceNow, across multiple organizations worldwide. It is still running, and the volume is climbing," explains Reco. "So far, we have only seen guest user activities - never an authenticated user, but we cannot rule it out." These attacks are not exploiting a vulnerability in Salesforce or ServiceNow. Instead, they steal data that organizations have mistakenly exposed to unauthenticated guest users through overly permissive sharing rules, permissions, or portal configurations. Both Salesforce Experience Cloud and ServiceNow use guest accounts to manage unauthenticated visitors. If these accounts are given access to data records, anyone on the Internet can potentially retrieve them through various API endpoints. On Salesforce, most of the observed activity targets the older Aura framework, where attackers are sending requests to the /aura or /s/sfsites/aura endpoint to determine which objects, such as Accounts, Contacts, Cases, are publicly accessible. Reco says the attacker first invokes HostConfigController.getConfigData to enumerate objects available to the guest account and then uses SelectableListDataProviderController.getItems to retrieve records from accessible objects. Reco says the busiest target recorded more than 560,000 events from the attacker's IP address, with nearly all of them related to guest Aura enumeration. This type of Salesforce guest-user abuse is not new and has previously been used in ShinyHunters data theft campaigns. ShinyHunters previously used a modified version of the AuraInspector tool to steal exposed records from misconfigured Experience Cloud portals. However, the City-Forum attacker is not only targeting these same Aura endpoints, but also Salesforce sites built using the newer Lightning Web Runtime (LWR) framework. On LWR sites, the attacker uses Salesforce's UI API to steal data exposed to guest accounts through GraphQL requests sent to /webruntime/api/services/data/{version}/graphql. Reco says it has not seen any public attack tools using this technique, and existing tools such as AuraInspector, S-RET, and CirrusGo do not use the webruntime interface. The attacker also targets Experience Cloud sites for /SiteRegister and /CommunitiesSelfReg endpoints to determine whether self-registration is enabled, which could allow a guest to create an authenticated external account with broader access. The same attacker is targeting ServiceNow Service Portals through the native POST /api/now/sp/search?sysparm_cancelable=true endpoint, which Reco says it had not previously seen abused in attacks. The endpoint, used by ServiceNow's portal search functionality, accepts anonymous requests and can return data when search sources are configured to permit guest access. Reco says attackers can vary search terms to enumerate exposed information, with one investigated environment seeing requests grow from tens to hundreds per day. Because ServiceNow transaction logs do not record the POST body, defenders can see that automated searches occurred and how much data was returned, but cannot determine the exact search terms used by the attacker. While some of this Salesforce activity is similar to previous ShinyHunters attacks, Reco says there is no evidence tying the current campaign to that group. The researchers also noted that previous campaigns such as ShinyHunters' typically used multiple systems and different IP addresses, while the City-Forum infrastructure has remained on the same IP address since March 2025. Salesforce administrators are advised to review guest-user sharing rules, object and field permissions, file access, member visibility, and self-registration settings. For LWR sites, Reco also recommends disabling the Experience Builder option that allows guest users to access public APIs when it is not required. Doing so will block access to various API endpoints used for data enumeration and theft. ServiceNow administrators should review which search sources are exposed through Service Portals and ensure that sensitive data search sources use strict authentication and access controls. After publishing this story, ServiceNow shared the following statement with BleepingComputer, confirming that its environment was not compromised as part of these attacks. "ServiceNow is aware of a security company's blog post claiming that improperly configured Service Portals can create unintended security risk. We can confirm there is no compromise of the ServiceNow environment," ServiceNow told BleepingComputer. "We proactively work with customers to support the ongoing security of their environments to best suit their unique business needs and encourage customers to reach out to ServiceNow support if they have questions regarding specific configurations." Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply. The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report

The "City-Forum" campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.

A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months Most security stories start with something broken. This one starts with everything working as designed. Researchers at Reco have been tracking a campaign they call City-Forum, named after a domain registered in 2002, abandoned, and now resolving to a generic rented server from a German hosting provider. From that server, someone has been pulling records out of Salesforce and ServiceNow portals around the world. The activity has not stopped, and there is more of it than there was. Every request Reco has seen from this address arrived as a guest. The targets they can see span telecom operators, banks and financial-services firms, enterprise-software vendors including security and data-privacy companies, and public-sector portals. What passive DNS establishes is that the domain has resolved to this address since at least March 2025, so the infrastructure has been standing for a while. When the scanning started is a different question. Here is the part worth sitting with: no software was exploited. No credentials were needed. There is no vulnerability here to patch. The attacker visited public customer portals as an anonymous visitor and asked them, politely and repeatedly, for their contents. The portals answered. The guest in the room Salesforce gives every Experience Cloud site its own standing account called the guest user, and every ServiceNow instance has one too. It is a real user with a profile and permissions like any other. When an unauthenticated stranger loads your support portal or your knowledge base, that is who they are browsing as. The guest user is not optional, it cannot be deleted, and it arrives with permissions that somebody, at some point, configured. Nothing came out of these portals that they had not been configured to hand over. Nitay Bachrach, Security Researcher at Reco, describes the underlying problem: “The core issue is that ‘what is public’ and ‘what should be public’ are two different things, and that’s exactly what the attacker exploited.” Why this one stands out Attackers have been abusing over-permissioned Salesforce guest users for a while, and there are off-the-shelf tools for it. This operator did not use them. They built their own instead. Most of the resulting traffic still went down the well-trodden route: Salesforce’s older Aura framework, whose guest user has been a documented target for long enough that Reco has written up a previous campaign working the same way. That is where the bulk of this operator’s Salesforce effort landed. The busiest single target Reco observed logged over 560,000 events from this one address across the campaign window, almost all of it Aura enumeration. What makes the campaign worth reading about is the rest of the toolkit, pointed at two places nobody had bothered to look. The first is the data layer behind Salesforce’s newer site framework, which the existing attack tools ignore entirely. Reco’s phrase for it is an offensive blind spot. The second is a ServiceNow portal search endpoint so undocumented that ServiceNow publishes no reference for it. Reco worked out how it behaves by reading the code behind the search box on a stock portal. Obscurity is not what makes it dangerous, though. The endpoint is public by design, and what it hands back depends entirely on how the sources behind it are configured. One of the two most common sources that ship with the platform checks whether you are logged in before it goes near data. The other has no such check at all. It relies entirely on who has been granted read access to each knowledge base, which is a configuration question with nothing in the code to warn you either way. The two behave nothing alike. On the Salesforce side the new work was thin next to the Aura flood, a few requests against each API version on each subsite it found, which is roughly what you would expect while Aura sites are still the more common target. On ServiceNow it was the opposite: once the tool found a portal, almost everything it did there went at that one search endpoint. Both halves show the same homework. They point to someone who sat down with these platforms, learned them properly, and went looking for doors no scanner was checking. Who that someone is, Reco will not say. The activity resembles the ShinyHunters Experience Cloud campaign, guest enumeration of Salesforce over Aura and GraphQL, and Reco’s position is that a campaign not matching a group’s last known fingerprint tells you nothing on its own, since actors rewrite tooling and rent new boxes constantly. One thing is unlike those campaigns, offered as a soft signal rather than a finding: this operator has held a single address for at least seventeen months, with no rotation at any point. The uncomfortable bit: you cannot see what left Suppose you go looking and find this traffic in your own logs. You will learn less than you would like. On ServiceNow, the transaction log records that a search happened and roughly how much came back, but not the search terms. Response size is the one thing there that speaks to what came back, and the last section below has what to do with it. Salesforce gives you more, though not enough to close the question. As Bachrach describes it, “Salesforce is somewhat better for what was attempted (which Aura actions, LWR GraphQL version-sweep URIs, self-reg probes). Event Monitoring doesn’t show which records/fields were returned.” So the logs tell you what was tried, not what was taken. On the obvious follow-up, Bachrach says: “It is not possible to determine what was leaked based on the audit logs. An organization would need to simulate the requests internally and analyze the responses.” In other words, to find out what an anonymous visitor could read, someone on your side has to go and be an anonymous visitor. There is a catch in doing that, at least on ServiceNow. The portal search endpoint answers an anonymous request with the same HTTP 201 whether or not it has anything to hand over. A portal that is leaking and a portal that is shut look identical from the outside, and the only thing separating them is whether the body that comes back is empty. A probe that returns cleanly has told you nothing until you read what it returned. The operator faced the same ambiguity and turned it into a method, mapping each portal’s contents by noting which search terms produced a response with anything in it. Bachrach’s position on when this crosses into something customers hear about: “If the data contains PII or other private data, customers should be notified.” The records were technically reachable by anyone. Whether they should have been is the part that determines the phone calls you make afterwards. The same mistake, on both platforms Asked which misconfiguration turns up most often, Bachrach points to one: “The most frequent misconfiguration was guest/anonymous over-permission. It was the root cause on both platforms.” He also separates the highest-impact fix from the most common problem: “Salesforce guest sharing rules are the highest-impact fix, but not necessarily the most common misconfiguration.” Sharing rules are where the leverage is, so start there, but do not stop there and assume the job is done. None of this is glamorous work, and on ServiceNow it is more than a permissions screen. But it is a finite job, and the server on the other end has been sitting there since at least March 2025. You found the traffic. Now what? Bachrach offers guidance for the first hour. First, confirm it is this pattern. In Salesforce, check Event Monitoring AuraRequest and Sites entries with USER_TYPE = ‘Guest’, looking for high volumes of getItems and getConfigData, /webruntime/…/vNN.0/graphql version sweeps, and hits on /SiteRegister and /CommunitiesSelfReg. In ServiceNow, check syslog_transaction for /api/now/sp/search requests made as guest. Then sort those rows by output length. An empty result set has a small and consistent size, so anything sitting well above it is a search that came back with records. Start there. Then remediate. On Salesforce: Tighten guest sharing rules. Strip guest object and field permissions. Disable “Access Activities” and “API Enabled” on the guest user. Disable self-registration if it is not needed. Disable guest file access and member visibility. On LWR sites, disable “Allow guest users to access public APIs” if it is not required. On ServiceNow: Map guest portals to their search sources, and those sources to their scripts. Review knowledge base “Can Read” user criteria for unconstrained “Any User” access. Review the enabled scripted search sources (sp_search_source) for the portal. Detach bad kb_uc_can_read_mtom links rather than editing shared criteria.

Reco is tracking a sophisticated and innovative campaign targeting both Salesforce and ServiceNow via what appears to be a custom made multi-platform toolset. Researchers believe the primary targets include telecoms, banks and financial-services firms, enterprise-software vendors (including security and data-privacy companies), and public-sector portals. The campaign has been named ‘City-Forum’. It is directed at both Salesforce Aura and the newer LWR implementations, where it is the first observed in‑the‑wild exploitation of Salesforce’s UI‑API guest surface. Furthermore, attacks on Aura (necessarily included in a Salesforce campaign since Aura users still outnumber LWR users) are integrated with the LWR attacks in a single toolset. “One Go binary hit Salesforce over both Aura and LWR and hit ServiceNow, from the same box,” comment the researchers in a blog report. This is consistent with a custom toolset rather than anything off the shelf like AuraInspector. The primary access key for both platforms is the Guest User. Every Salesforce Experience Cloud has its own Guest User in which an unauthenticated request works. ServiceNow is similar. “You cannot delete those guest users, and requiring login doesn’t remove them – the profile, its permissions, its sharing rules, and any code running in its context all still exist. If the guest can read a record, so can anyone on the internet.” To better understand the degree of innovation in this campaign, it is useful to compare the City-Forum campaign with other attacks targeting Aura – especially the ShinyHunters’ Salesforce Aura Campaign disclosed in March 2026. As well as targeting LWR in Salesforce, “[City-Forum] hammers a native ServiceNow Service Portal search endpoint that has almost no online documentation or well-known open source tools.” ShinyHunters targeted just Aura in Salesforce (no known targeting of ServiceNow) and used a modified version of the existing AuraInspector. City-Forum uses a new custom multi-platform toolset. Reco is at pains to explain that it doesn’t rule out ShinyHunters also being behind City-Forum, and goes on to add “We don’t know who this is, and we’re not ruling anyone in or out.” The City-Forum campaign uses a single machine. “The same IP has carried the same domain since March 2025 and is still scanning today – at least seventeen months on one address, with no rotation at any point.” That IP (158.220.87.79) resolves to city-forum.com. Reco draws no inference from this, but the main advantage of a single machine is that it reduces the attacker’s footprint to anomaly detection systems. It may be easier to block if known, but harder to detect if stealthy. The campaign targets unauthenticated guest user access in both Salesforce and ServiceNow. However, conversion to an authenticated user in Salesforce would be possible if self-registration is enabled. There is no similar mechanism for ServiceNow. Being an authenticated guest user is not necessary, but could provide access to more sensitive data. Since many organizations misconfigure guest permissions, this is a continuing possibility. However, “So far, we have only seen guest user activities – never an authenticated user, but we cannot rule it out,” comment the researchers.” Aura gives up the majority of the Salesforce data collected and exfiltrated. “The busiest target logged over 560,000 events… across the campaign window, essentially all of it guest Aura enumeration,” say the researchers. Data is also pulled from the Salesforce LWR sites using GraphQL. The ServiceNow attack targets the effectively undocumented search endpoint. It uses this to detect substantial content. “The Output length column is worth a glance while you’re here: rows returning noticeably more than the small empty-result baseline are searches that came back with content.” The attacker can pull from the most likely results. The exfiltration is not noisy – it is high volume but protocol-legitimate. This makes detection difficult, perhaps confirming the stealth intent behind using a single constant destination address. As with the ShinyHunters attack, there is no suggestion of a breach of the Salesforce or ServiceNow platforms. “Every byte the attacker retrieved was something a site owner had exposed to anonymous users.” Being targeted by City-Forum is not a noisy easy-to-see attack. But most things can be found if you know where to look. The Reco research blog includes detailed IOCs and remediation instructions. At the very least, as soon as possible make sure that self-registration is not enabled. This will hinder any attempt for an unauthenticated guest to upgrade to an authenticated guest. Related: BeyondTrust, LastPass Impacted by Klue-Salesforce Incident Related: Salesforce Instances Hacked via Gainsight Integrations Related: Extortion Group Leaks Millions of Records From Salesforce Hacks Related: Hackers Extorting Salesforce After Stealing Data From Dozens of Customers

ServiceNow organizes autonomous security around six solution areas ServiceNow has announced an acceleration of its Autonomous Security vision with six unified solutions that help deliver prevention-first, AI-native cyber defense across unified exposure management, continuous vulnerability detection, cyber-physical security, identity and access security, and agentic incident response, and cyber risk and compliance. With new AI Specialists that complete security workflows autonomously, including the Vulnerability Resolution AI Specialist, these capabilities enable enterprises to prevent, contain, and remediate risk at machine speed, before threats become breaches. As enterprises adopt agentic AI, security teams face an emerging challenge: every new agent, identity, and line of code multiplies exposure faster than any human team, or any patchwork of disconnected tools, can respond to. Closing that gap requires governed autonomy at the same machine speed. The average enterprise runs more than 70 security tools, fragmenting insights across the extended attack surface, including endpoints, networks, cloud environments, and identities. This is achievable through Shift Zero: the move from fragmented, reactive security to prevention embedded at every layer, where every system, identity, and agent is governed and secured in real-time as threats move at AI speed. In Shift Zero, the goal is zero exposure at all times with an enterprise able to answer, with proof, what every system is doing, why, and who is accountable, while AI moves as fast as the business needs it to. “As AI exposures compound exponentially, security teams operate on a human clock,” said Yevgeny Dibrov, SVP and GM, cybersecurity and risk, ServiceNow. “Machine identities double every 18 months. Fragmented security tools can’t match the curve AI is creating. Organizations need autonomous security and governance that matches the scale, velocity, and unpredictability of the threats coming: where all assets, identities, AI agents, critical infrastructure, cloud environments and code are protected, and can adapt as fast as the ecosystem moves to detect and remediate threats in real-time. Security becomes an accelerant, not the brake.” Shift Zero: Prevention embedded at every layer Autonomous Security moves companies from reactive, fragmented security to prevention-first, autonomously governed security that operates faster than AI creates risk. The Autonomous Security offerings stand on six solutions that integrate into ServiceNow’s AI Control Tower. Unified Exposure Management: Exposures pile up in silos, with security teams seeing vulnerabilities but not the assets that matter or which ones could be easily exploited. ServiceNow consolidates findings from any source and enriches data with business context and exploitation intelligence, enabling autonomous remediation at scale. Agentic Exposure Management consolidates vulnerability findings from every source into a single stream enriched by Early Warning threat intelligence and Fix Intelligence prioritized remediation. Vulnerability Resolution AI Specialist orchestrates triage and remediation at enterprise scale, executes low-risk patches, and turns exposure backlogs into closure pipelines. Continuous Vulnerability Detection: The attack surface spans code, cloud, and infrastructure, but traditional tools only see one layer at a time. ServiceNow closes these gaps, enabling security teams to govern code, cloud, and infrastructure risks from a unified platform. Application Security extends threat modeling to AI-generated code and model dependencies with a new version that surfaces supply chain vulnerabilities before deployment. Dynamic Application Security Testing (DAST) validates runtime vulnerabilities in live applications and APIs. External Attack Surface Management (EASM) surfaces infrastructure exposure that attackers can exploit, showing a footprint the way threat actors see it. Cyber-Physical Security: OT, medical devices, and IoT systems can be blind spots because legacy tools disrupt production and lack the behavioral understanding needed to catch risky activity. ServiceNow brings continuous visibility and compliance monitoring to operational environments without disruption. Agentic AI for Cyber Physical Security delivers agentless discovery across OT and medical networks, establishes behavioral baselines, validates compliance continuously in real time, and models attack paths, so security teams understand adversary movement. Automated remediation workflows execute across brownfield environments without custom engineering. Identity & Access Security: Non-human identities, service accounts, cloud identities, and AI agents are everywhere and almost entirely ungoverned. ServiceNow enables security teams to see, control, and govern every identity across the enterprise under consistent least-privilege principles. AI Agent Access Security unifies access control for AI agents across any platform or model provider, closing the threat vector of ungoverned agents with escalated permissions. Non-Human Identity Remediation moves beyond risk scoring into active action: automated key rotation, deprovisioning, and permission revocation at scale across IT, OT, IoT, and medical networks; enables AI agents and service accounts to operate under identical identity governance as human users. Agentic Incident Response: Incident response teams can lose hours stitching together threat intelligence, asset ownership, and identity data when they should be stopping threats. ServiceNow automates triage and investigation, freeing analysts to focus on sophisticated threats. Agentic Incident Response enables ServiceNow’s Tier 2 SOC AI Specialist to autonomously build and execute multi-phase response plans for complex incidents, performing actions like enrichment, correlation, containment and blocking while escalating only high-risk decisions to human analysts. Cyber Risk and Compliance: Compliance remains a pre-audit scramble. Evidence collection is manual, controls are monitored quarterly, and organizations are stuck playing catch-up. ServiceNow transforms compliance from a seasonal event into a continuous operational signal. Agentic AI for Continuous Control Monitoring transforms control evidence into a continuous operational signal. Automated agents evaluate segregation of duties, access rights, and configuration state across ServiceNow and external systems in real time, surfacing violations the moment they occur. Compliance-ready reports exist on demand across regulatory frameworks including SOC 2, ISO 27001, PCI-DSS, and HIPAA. Cryptographic Asset Compliance enables rapid migration from legacy cryptographic algorithms to quantum-resistant standards before the quantum threat window closes. ServiceNow delivers comprehensive discovery, AI-powered risk profiling, and guided migration workflows across on-premises and cloud environments, with full integration to ServiceNow Integrated Risk Management and Governance, Risk, and Compliance (IRM/GRC) products for regulatory compliance evidence at enterprise scale. “For organizations operating complex industrial environments, effective cybersecurity starts with understanding risk and maintaining visibility across the enterprise,” said Brandon Glaze, Sr. Director, Cybersecurity (OT/ICS) at Baker Hughes. “We’ve appreciated the collaboration and innovation from the ServiceNow (Armis) team as we continue working together to improve cyber resilience and support secure, reliable operations.”

Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: AI agents are still logging in as humans Most large companies run more than one AI platform at the same time. Developers pull up coding assistants, marketing teams lean on writing tools, and analysts query enterprise search across separate vendors. Single-provider setups keep giving way to mixed stacks as companies keep their options open. PR3TACK preemptive framework maps threats before attackers use them Defensive frameworks in cybersecurity record what attackers have already done. Analysts study a breach, document the method, and build detections around confirmed activity. This cycle leaves a gap between the moment an attacker invents a technique and the moment defenders learn to catch it. PR3TACK, the Preemptive Tactics and Countermeasures Knowledgebase, aims to close that gap. The air gap is a myth and other OT security truths Benjamin Bachmann, Director Group Information Security at Bilfinger, speaks with Help Net Security about defending industrial plants. He explains why attackers want to control operations instead of stealing data, and why the air gap is mostly a myth. Cisco’s open-weight Antares models make vulnerability localization cheaper A security analyst opens an unfamiliar repository, reviews a vulnerability advisory, and begins searching for the source file where the flaw resides. The naming conventions are unfamiliar, and clues are scattered across thousands of files. That initial triage can consume hours of expert effort. Cisco aims to shorten that process with Antares, a family of small language models designed to identify the source files most likely to contain a known vulnerability. Snowpick: Open-source ServiceNow exposure scanner An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test across 166 ServiceNow instances during authorized penetration tests. The firm published the results along with the Go tool it used, Snowpick. The AI code vulnerabilities that grow with your app Theori built 28 apps with AI coding agents and scanned each one through its pentesting platform. Five models did the building, split between Anthropic and OpenAI, across apps written from a spec, thrown together from a casual prompt, and rewritten from an aging PHP codebase. Multi-patch vulnerability fixes can leave open source exposed Vulnerability management runs on a shorthand. A CVE shows a linked patch, someone applies it, and the ticket moves to closed. That shorthand covers most open source fixes. A share work in a different way, arriving as a run of two or more commits where the first one leaves the flaw in place. Researchers at the University of Texas at Dallas went through 1,646 open source CVEs that carry more than one patch in the National Vulnerability Database, drawn from records filed between 1999 and 2025. Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process Cisco Talos has identified a Rust-based remote access trojan it attributes to the Chaos ransomware group, named msaRAT after four of the binding names left in the binary. The tool starts its own instance of Chrome or Edge on the victim machine and controls it through Chrome DevTools Protocol, a debugging interface built into both browsers. The browser then carries the command-and-control traffic over a WebRTC channel. The best-funded companies open the most phishing attachments An employee gets an email dressed as a password reset. She clicks the link, types her credentials into a page built to copy her company’s login screen, and moves on with her morning. She tells no one. That silence is the exposure. Across 13.9 million simulated phishing messages, one in ten recipients flagged the attempt to their security team. The rest let it through, and a live attacker needs only one of them. Hugging Face breached by autonomous AI agent Hugging Face, the widely used platform for sharing open-source machine learning models and datasets, has disclosed a security breach it says was carried out by an autonomous AI agent system. In a blog post published Thursday (July 16), the company said that earlier that week, it identified unauthorized access to some internal datasets and to several credentials used by its services. ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875) Attackers have begun exploiting CVE-2026-6875, a critical pre-authentication vulnerability in the ServiceNow AI Platform, according to threat intelligence firm Defused. CVE-2026-6875 is a code injection vulnerability that lets unauthenticated attackers escape ServiceNow’s script sandbox and execute code remotely on a targeted instance. SonicWall SMA zero-days were exploited weeks before disclosure Two recently disclosed SonicWall SMA 1000 vulnerabilities – CVE-2026-15409 and CVE-2026-15410 – were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances, Volexity researchers revealed. JadePuffer returns with ransomware built to target AI models and infrastructure JadePuffer, the threat actor behind the recently documented extortion operation executed end-to-end by an AI agent, is now attempting to leverage ENCFORGE, novel ransomware created to target AI and machine learning (ML) infrastructure. The extortion contact embedded in the ransomware is the same one Sysdig researchers found when analyzing that prior campaign. Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522) Attackers are exploiting a critical SharePoint remote code execution (RCE) vulnerability (CVE-2026-50522) to extract the servers’ IIS machine keys. WatchTowr’s global honeypot network registered successful exploitation attempts on July 20, mere hours after the release of the proof-of-concept exploit and less than a week after Microsoft confirmed that CVE-2026-56164 (an privilege elevation flaw) and CVE-2026-58644 (a RCE vulnerability) are being actively exploited by attackers. OpenAI: Our models breached Hugging Face during a cyber capability test The recent Hugging Face breach was the work of several OpenAI models, the AI research company claimed in a blog post. Late last week, the company behind Hugging Face, a platform that enables users to share machine learning models and datasets, said some of its internal datasets had been accessed without authorization. Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-16232) that affects Check Point Security Management and Multi-Domain Security Management, the management servers that push policy to Check Point security gateways (i.e., firewalls). How attackers hosted a fake Claude download page on the claude.ai domain A threat actor abused Anthropic’s Claude Artifacts feature to funnel users toward malware, Huntress researchers have disclosed. Employees at at least 29 organizations were compromised over two days in July, after searching for the Claude desktop app and clicking a sponsored Bing ad. Shadow AI is becoming enterprise security’s biggest blind spot Artificial intelligence has moved from experimentation to everyday business operations with remarkable speed. Employees are using it to summarize documents, draft communications, analyze spreadsheets, write code, build automations, and create AI-powered workflows across nearly every business function. As AI is integrated into team members’ daily jobs, businesses are struggling to keep pace with governance, management practices, and organizational readiness. More alerts are making your team slower, and an outcome-based SOC fixes that In this Help Net Security video, Thom Langford, EMEA CTO, Rapid7, explains why piling on more security alerts makes a SOC slower to respond. Attackers log in with stolen credentials and use trusted tools like PowerShell instead of custom malware. He shares a case where attackers called a help desk, reset a privileged cloud account, and exposed thousands of passwords in three minutes. Building a defense in depth strategy for sensitive data In this Help Net Security video, Venkata Pavan Kumar Gummadi, Professional Software Engineer at Broadridge, explains how to build a defense in depth strategy for protecting sensitive data. Governing Al agents at scale: Lessons from the leaders who’ve done it Enterprise AI leaders from ZoomInfo, Docusign and AppViewX share what it took to build AI Centers of Excellence and govern agent identities inside two companies operating at scale. A forensic tool for backdoored code completions in AI assistants Developers lean on AI coding assistants for a growing share of their daily work, letting the tools predict the next few lines and accepting many suggestions with a quick glance. Those tools learn from large collections of code, and some of that code can be tampered with before training starts. A poisoned example teaches a model to write insecure code when it sees a certain cue, and the flaw sits quietly until the right prompt sets it off. Italy fines WINDTRE €1.7 million over security flaws behind two data breaches Italy’s data protection authority, the Garante per la Protezione dei Dati Personali, fined WINDTRE €1.7 million over “serious data security shortcomings” that let hackers breach its systems twice and exfiltrate personal data belonging to more than 365,000 customers. Paidwork breach exposes sensitive data of 23 million users Data belonging to more than 23 million users has been exposed following a breach at Paidwork, a platform that pays people for completing online microtasks. Paidwork markets itself as a way to earn money through simple tasks like watching ads, testing apps, and completing surveys, with most jobs paying only a few cents at a time. HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. The Odyssey piracy scams surface hours after its theatrical debut Christopher Nolan’s The Odyssey had barely reached theaters before scammers began targeting people searching for pirated copies, according to Malwarebytes. Within hours of the film’s release, researchers found two separate scams running on cloned piracy sites: fake browser warnings and Windows executables disguised as movie downloads. Estée Lauder discloses data breach tied to Oracle EBS vulnerability Cosmetics company Estée Lauder disclosed a data breach tied to a vulnerability in Oracle E-Business Suite (EBS) used for the company’s human resources operations. The data taken varied from person to person. According to the notification, it included names, postal and email addresses, dates of birth, Social Security numbers, passport numbers, bank account numbers, health information, and employment records such as performance evaluations and payroll history. Fake FBI agents target people who already got scammed Scammers are impersonating FBI personnel who supposedly handle Internet Crime Complaint Center (IC3) complaints, using that disguise to deceive and revictimize people who already lost money once. AI agents tricked into recommending malicious GitHub repositories Roughly 7,600 malicious GitHub repositories were uncovered, more than 800 of them posing as AI Skills or Model Context Protocol (MCP) servers, in a wave that peaked in April 2026, according to Island. Small teams are the heaviest users of AI coding agents The pull request arrives with the tests already run and the description already written, the work of an agent that handled the whole thing on its own. Somebody still has to read it. On GitHub that somebody is usually one developer sitting alone with the diff, and the rest of the project never sees the code. Maliha Noushin Raida and Daqing Hou at Rochester Institute of Technology sorted 25,264 agentic pull requests by who reviewed them and who committed to them. Police dismantle Kratos phishing platform behind 15,000 monthly campaigns German and US law enforcement have dismantled the infrastructure behind Kratos, a notorious phishing-as-a-service (PhaaS) platform. Its alleged developer and administrator was arrested in Indonesia by local police. AI models cheat on cybersecurity evaluations, then fail to admit it Frontier AI models will take just about any route to finish a task, cheating included, according to new cybersecurity evaluations from the UK government’s AI Security Institute (AISI). AISI defines cheating as a model doing something outside the bounds of what a task allows, or breaking a stated rule outright, in order to reach the goal through a shortcut the task wasn’t designed to permit. US seizes over 1,000 domains used for illegal World Cup 2026 streams The US Department of Justice has seized more than 1,000 internet domains that streamed FIFA World Cup 2026 matches without a license. The seizures came in three waves over the course of the tournament. The first two rounds took down nearly 400 domains by the end of June, and two later rounds pushed the total past 1,000. OpenAI Presence connects AI agents to enterprise data with built-in guardrails OpenAI has introduced Presence, a product designed to help companies deploy AI agents that handle customer support and internal service requests across voice and chat. The company describes Presence as a deployment platform rather than a standalone model. Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack Cybercriminal group Everest is demanding 10 million Swiss francs ($12.3 million) from Swiss rail vehicle manufacturer Stadler after breaching a data exchange platform shared with one of its suppliers through compromised credentials. Months-long breach exposes South Korean diplomats’ personal data South Korea’s Foreign Ministry has disclosed that attackers breached the Korea National Diplomatic Academy’s online education system, compromising personal data belonging to current and former ministry staff and diplomats stationed abroad. Ransomware gangs go after EMEA healthcare’s supply chain A ransomware attack against a hospital makes headlines, while attacks on the rest of the ecosystem around it tend to stay quiet despite doing damage that can be just as bad. Flare researcher Assaf Morag analyzed ransomware leak-site activity tied to healthcare organizations in the EMEA region between 2024 and 2026, and found that ransomware groups are going after the entire healthcare supply chain. Google gives developers an AI bug hunter that also writes patches Google has launched a preview of CodeMender, an AI agent built to scan code for security flaws, confirm they are exploitable, and generate fixes for developers to review. The company describes it as a response to attackers who are already using AI to speed up their work, arguing that defenders need automation that moves at the same speed. Russian hackers exploit unpatched Zimbra servers to steal emails Russian state-backed hacker group Laundry Bear has been breaking into government and commercial networks for at least a year by exploiting a vulnerability in the Zimbra Collaboration Suite (ZCS) webmail platform. Meta takes on AI-generated accounts with free Facebook verification badge Meta has introduced Facebook Verified, a free badge meant to show that a person behind a profile has completed identity verification through a selfie check. The company says the goal is to give users a signal that they are dealing with a person, not a bot or an AI-generated account, when browsing Marketplace listings, dating profiles, or Group conversations. Nearly half of open-source AI projects never reach production Open models are moving into production across more organizations, and the work of securing those deployments increasingly extends beyond the model weights. Mozilla’s The State of Open Source AI 2026 identifies deployment, governance and operational tooling as persistent obstacles as model capability improves. Product showcase: ZoneAlarm Mobile Security adds customizable content filtering to mobile security ZoneAlarm Mobile Security is a security app from Check Point designed to protect mobile devices against phishing, malicious websites, unsafe networks, and fraudulent links. It is available for iPhone, iPad, Android, and can run on Apple silicon Macs through the App Store. Meet Dusseldorf, Microsoft’s open-source out-of-band security platform Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own. A new open-source project from Microsoft supplies that infrastructure in a package meant to run inside a private environment. The Windows 10 hangover is becoming a security problem Windows 11 now runs on 78.8% of Windows devices after Microsoft ended support for Windows 10 on 14 October 2025, according to Lansweeper. Windows 10 still accounts for 16.9% of devices and no longer receives security updates, leaving newly discovered vulnerabilities unpatched. AI-generated reports push GNOME to shorten its disclosure window Volunteer maintainers of open source projects now receive a steady flow of security vulnerability reports produced with AI tools. Many arrive with no mention that a language model helped write them. The volume has grown enough that GNOME is revising the rules it uses to track and disclose vulnerabilities across its projects. Nobody was checking the drives that encrypt your laptop A drive ships with a label promising hardware encryption. You plug it in, set a password, and trust the chip inside to handle the rest. Millions of laptops and workstations run this way, on solid-state drives built to the TCG Opal2 standard. Milan Brož and three colleagues bought 38 of those drives and ran them through a test bench. Open-source maintainers still work underfunded as sponsorship crosses $100 million A maintainer patches a library late at night that ships inside thousands of products, without receiving payment. Sebastián Ramírez (tiangolo) builds tools that many Python projects depend on, while Caleb Porzio created Livewire and Alpine.js, widely used by web developers. That gap comes at a cost. Critical projects lose maintainers to salaried jobs, security fixes slow, and software supply chains become more fragile. AWS wants GuardDuty to automate the first steps of threat investigations Amazon GuardDuty investigation agent is now in public preview. The feature provides AI-powered investigations of GuardDuty findings, AWS accounts and AWS organizations, helping security teams reduce investigation time. Cloud operations become the next big role for agentic AI Companies are using agentic AI to manage growing application environments, automate routine tasks, and support decisions. Business and IT leaders increasingly see the technology as part of cloud application management, according to Unisys’ AI & Cloud Insights Report. AI can’t fix cybersecurity’s hiring problem Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past year, alongside increased hiring for existing cybersecurity skills. Security teams keep finding critical flaws after scheduled testing ends Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilities outside planned testing windows during the past year, with 42% encountering them at least once a month. Google’s Gemini 3.5 Flash Cyber becomes a vulnerability hunter Google’s Gemini 3.5 Flash Cyber model finds, validates, and patches vulnerabilities before they can be exploited while helping mitigate broader misuse. It is part of a limited-access pilot program that will soon be available to governments and trusted partners through CodeMender, Google DeepMind’s AI coding agent, with broader access planned over time. GitHub revamps bug bounty program with new VIP tier, payout changes GitHub is changing its bug bounty program to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports. The changes will take effect on July 27, 2026. Reports submitted before that date will be honored under the previous bounty structure. PyPI hardens package security with new upload restrictions The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromised. Ransomware in 2026: More groups, more victims, no slowdown Ransomware activity followed a recognizable pattern during the previous four years. Each year was defined by a dominant actor, its collapse, or a major supply chain incident. Black Kite’s 2026 Ransomware Report documents a more fragmented market, with multiple ransomware playbooks scaling at the same time. The automotive software vulnerabilities hiding in your dashboard Pop the hood on a new car and you won’t find much you can fix with a wrench. What you’ll find is software, and a lot of it. The screen in the dash probably runs Android or a flavor of Linux. The system watching the road for you might run QNX or VxWorks, the same kind of code that flies aircraft and runs factory floors. Google’s newest sign-in method asks you to look at the camera Google’s selfie video sign-in option verifies that an account owner is a real person and that the account wasn’t created or used by computer programs or bots for the purpose of abuse, such as spamming. It is not available for all regions, accounts, or devices. Microsoft tightens Windows enterprise activation security Microsoft is making Trusted Platform Module (TPM)-backed attestation a requirement for Windows Key Management Service (KMS), the on-premises service used for Windows volume activation, replacing the software-only trust model with hardware-backed verification to strengthen enterprise activation security. Product Showcase: AppViewX Agent Identity Security Agent Identity Security is a product within the AppViewX platform that enables zero-trust for AI agents by continuously discovering, monitoring, governing, and securing identities across their lifecycle. Cybersecurity jobs available right now: July 21, 2026 We’ve scoured the market to bring you a selection of roles that span various skill levels within the cybersecurity field. Check out this weekly selection of cybersecurity jobs available right now. New infosec products of the week: July 24, 2026 Here’s a look at the most interesting products from the past week, featuring releases from Astelia, Druva, Swimlane, and ThreatDown.

A critical remote code execution vulnerability that was recently patched in the ServiceNow AI platform is reportedly being exploited in the wild. The security hole is tracked as CVE-2026-6875 and it has been described as a sandbox escape issue that an unauthenticated attacker can exploit in certain circumstances to execute arbitrary code. When it announced the availability of patches on July 14, ServiceNow said a security update addressing the vulnerability had been deployed to hosted instances. However, self-hosted customers have to install the patches themselves. On the same day, cybersecurity firm Searchlight Cyber disclosed technical details and showed how the vulnerability can be exploited. Threat intelligence firm Defused reported on July 18 that it had seen in-the-wild exploitation of CVE-2026-6875, leveraging information Searchlight Cyber had released. Defused initially said the exploit reached the same outcome as Searchlight’s proof-of-concept but through a slightly different method. On Monday, however, the firm issued a correction, saying that closer analysis showed the captured payload was in fact identical to Searchlight Cyber’s own. The vendor’s initial advisory stated it had no knowledge of active exploitation, and as of this writing, that advisory has not been updated to reflect otherwise. “ServiceNow is aware of a cybersecurity company’s recent publication regarding exploitation activity associated with a previously disclosed security vulnerability, identified as CVE-2026-6875,” a ServiceNow spokesperson told SecurityWeek. “Based on our investigation to date, we have not observed evidence that this activity is related to instances that ServiceNow hosts.” “We have provided updates and patches designed to address this issue, and we encourage our self-hosted and ServiceNow-hosted customers to apply the relevant patches if they have not already done so. In addition, we will continue to work directly with customers who need assistance in applying the patches,” the spokesperson added. There do not appear to be any other reports describing the exploitation of CVE-2026-6875, and there is a chance that the activity is being carried out by members of the cybersecurity industry seeking vulnerable systems. ServiceNow informed customers last month of an exploited vulnerability, but the company later clarified that the exploitation had been attributed to security researchers rather than attackers. ServiceNow vulnerabilities are not often exploited by threat actors. CISA’s KEV catalog currently includes only two flaws, both patched in 2024. Related: SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch Related: WP2Shell WordPress Vulnerabilities Exploited in the Wild Related: Fresh SharePoint Vulnerability Exploited Soon After Disclosure

Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code. Patches for the flaw were released by ServiceNow throughout June in the following versions - Brazil EA and Brazil GA Australia Patch 2 Zurich Patch 7b and Zurich Patch 9 Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13 Searchlight Cyber, which disclosed additional technical specifics, said it reported the issue on April 1, 2026, adding it allows a complete compromise of the ServiceNow instance as well as all connected proxy servers. Besides rolling out a fix, ServiceNow is "enhancing instance security by severely restricting the type of code that can run in sandbox contexts," security researcher Adam Kues noted. Defused initially noted that the exploitation efforts target the same pre-authentication endpoint ("/assessment_thanks.do") using HTTP POST requests, although the sandbox-escape gadget leads to the same code execution primitive by a different route documented in the proof-of-concept (PoC) exploit. However, in a subsequent post, Defused issued a correction, stating the captured payload in fact matches that of Searchlight Cyber's PoC. In light of active exploitation, customers of self-hosted versions are advised to apply the fixes, if not already, to counter the threat. Update Following the publication of the story, a ServiceNow spokesperson told The Hacker News that there has been no exploitation observed to date. "ServiceNow is aware of a cybersecurity company's recent publication regarding exploitation activity associated with a previously disclosed security vulnerability, identified as CVE-2026-6875," the spokesperson noted. "Based on our investigation to date, we have not observed evidence that this activity is related to instances that ServiceNow hosts." "We have provided updates and patches designed to address this issue, and we encourage our self-hosted and ServiceNow-hosted customers to apply the relevant patches if they have not already done so. In addition, we will continue to work directly with customers who need assistance in applying the patches." (The story was updated after publication to include a response from ServiceNow.)

ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875) Attackers have begun exploiting CVE-2026-6875, a critical pre-authentication vulnerability in the ServiceNow AI Platform, according to threat intelligence firm Defused. About the vulnerability ServiceNow AI is a Platform-as-a-Service that lets organizations build and automate digital workflows. CVE-2026-6875 is a code injection vulnerability that lets unauthenticated attackers escape ServiceNow’s script sandbox and execute code remotely on a targeted instance. The vulnerability was unearthed by Searchlight Cyber researchers and reported to ServiceNow in early April 2026. The latter company pushed out a security update to hosted instances the very next day, and made patches and security updates available to self-hosted customers and partners throughout June. The existence of CVE-2026-6875 was publicly revealed on July 13. The security advisory and warning were followed by Searchlight Cyber’s very technical post detailing the flaw. Researcher Adam Kues describes it as exploitable in high-complexity attacks, but allowing unauthenticated code execution and full compromise of the ServiceNow instance and any connected proxy servers. Exploitation in the wild Defused researchers say the first exploitation attempts appeared on Friday and confirmed active in-the-wild abuse over the weekend. They said that the observed payloads hit the same pre-authentication endpoint (/assessment_thanks.do) that Searchlight Cyber documented in its public research, but the attackers’ sandbox-escape gadget reaches the same code-execution primitive by a different route than the one in the published proof-of-concept. With this in mind, administrators of self-hosted instances who have not yet applied the July 13th update should do so now. The security updates also carry Guarded Script, a new feature that restricts the type of code that can run in sandbox contexts, thus making future sandbox escapes less likely. UPDATE (July 20, 2026, 04:30 p.m. ET): “ServiceNow is aware of a cybersecurity company’s recent publication regarding exploitation activity associated with a previously disclosed security vulnerability, identified as CVE-2026-6875. Based on our investigation to date, we have not observed evidence that this activity is related to instances that ServiceNow hosts,” a ServiceNow spokesperson told Help Net Security. “We have provided updates and patches designed to address this issue, and we encourage our self-hosted and ServiceNow-hosted customers to apply the relevant patches if they have not already done so. In addition, we will continue to work directly with customers who need assistance in applying the patches.” This article has also been amended to reflect the fact that ServiceNow pushed patches to customers throughout June (and not in last week, as previously stated). Subscribe to our breaking news e-mail alert to never miss out on the latest breaches, vulnerabilities and cybersecurity threats. Subscribe here!

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. Formerly known as the Now Platform, ServiceNow AI Platform is an enterprise-grade Platform-as-a-Service (PaaS) that helps businesses integrate AI into core enterprise workflows. Cybersecurity company Searchlight Cyber, which found this critical vulnerability and reported it on April 1st, says that it allows unauthenticated threat actors to escape the sandbox and execute code remotely within the ServiceNow platform in high-complexity attacks. ServiceNow addressed the flaw across hosted instances starting in April and released CVE-2026-6875 security updates for self-hosted instances one week ago, on July 13th. Over the weekend, Defused security researchers confirmed that attackers have begun exploiting the vulnerability in the wild, with the first attempts being observed on Friday. "We are observing in-the-wild exploitation of the ServiceNow pre-auth sandbox-escape RCE (CVE-2026-6875)," Defused warned in a Saturday tweet. "The payloads hit the same pre-auth sink @SLCyberSec documented (/assessment_thanks.do), but the sandbox-escape gadget reaches the same code-execution primitive by a different route than their published PoC." ServiceNow has yet to flag this security as actively abused and, in the official advisory, still states that it is "not currently aware of exploitation against ServiceNow instances." However, the company advises all customers who have not already done so to secure their systems against attacks by upgrading to a patched release as soon as possible. "ServiceNow is aware of a cybersecurity company’s recent publication regarding exploitation activity associated with a previously disclosed security vulnerability, identified as CVE-2026-6875. Based on our investigation to date, we have not observed evidence that this activity is related to instances that ServiceNow hosts," a ServiceNow spokesperson told BleepingComputer. "We have provided updates and patches designed to address this issue, and we encourage our self-hosted and ServiceNow-hosted customers to apply the relevant patches if they have not already done so. In addition, we will continue to work directly with customers who need assistance in applying the patches." Last month, ServiceNow also privately disclosed a security incident in which attackers queried data from customer instances by exploiting an unauthenticated access flaw via a vulnerable API endpoint. In a subsequent advisory, it tied the incident to security researchers or customer-led research linked to bug bounty submissions rather than to malicious threat actors. ServiceNow says that its AI Platform runs more than 100 billion workflows each year and powers over 100,000 enterprise AI apps at 85% of all Fortune 500 companies. Update July 20, 15:50 EDT: Added ServiceNow statement. Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply. The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report

Fortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products. ServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5). “ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,” the company said. Ivanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903. A medium-severity open redirect and a high-severity path traversal, the weaknesses could allow attackers to redirect users to arbitrary external URLs and read arbitrary files outside the web root. ServiceNow and Ivanti say they are not aware of the addressed vulnerabilities being exploited in the wild. On Tuesday, Fortinet published 11 security advisories detailing 12 vulnerabilities in FortiOS, FortiProxy, FortiSASE, FortiSIEM, FortiClient EMS, FortiAuthenticator, FortiPAM, FortiSwitch Manager, FortiSwitch-Manager Agentless SSL-VPN, and FortiSandbox. The most severe of these flaws are high-severity bugs in FortiAuthenticator and FortiSandbox that could be exploited by remote unauthenticated attackers to retrieve sensitive information and access the VNC server of VMs performing scanning. Fortinet also fixed medium- and low-severity issues leading to memory leaks, command execution, arbitrary header injection, interception and modification of authentication requests, impersonation of an AD Connector via a valid API Key, deletion of the file system, and code execution. The company makes no mention of any of these security defects being exploited in attacks. Related: Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption Related: ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell Related: Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates Related: SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits

Risolta vulnerabilità in ServiceNow Alert AL02/260714/CSIRT-ITA Sintesi Risolta una vulnerabilità “critica” in ServiceNow AI Platform, piattaforma AI che unifica dati, workflow, automazione e AI agent in un unico ambiente cloud aziendale. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati. Tipologia Remote Code Execution Prodotti e/o versioni affette ServiceNow AI Platform Brazil - versioni precedenti a Brazil EA - versioni precedenti a Brazil GA Australia - versioni precedenti a Patch 2 Zurich - versioni precedenti a Patch 7b versioni precedenti a Patch 9 Yokohama - versioni precedenti a Patch 12 Hot Fix 1b versioni precedenti a Patch 13 Azioni di mitigazione In linea con le dichiarazioni del vendor, si raccomanda di aggiornare i prodotti vulnerabili seguendo le indicazioni del bollettino di sicurezza riportato nella sezione Riferimenti.

Bug bounty research inadvertently led organizations to believe they were being breached through their ServiceNow instances.

ServiceNow is informing customers that it has patched a vulnerability that appears to have been exploited. ServiceNow’s cloud-based platform is widely used by organizations for automating and managing workflows across IT service management, HR, customer service, and other enterprise operations. The company has not made any information about the cybersecurity incident public, but an advisory available to authenticated customers — a copy of which was shared on Reddit — indicates that hosted customer instances received a security update on June 5. “The update concerned a security issue that could allow an unauthenticated user, in certain circumstances, to gain greater access to ServiceNow instances than intended,” ServiceNow said. “The security update changes an endpoint configuration to limit access to authenticated users.” The company added, “We have detected anomalous activity relating to the security issue. For a subset of customers, we have observed evidence of successful queries of instance tables. We have notified customers if successful queries were observed via case.” ServiceNow clarified in the same advisory that users on its Australia platform release or those who have made specific configuration changes are affected. Currently, customers are being told that they do not need to take any action. The vendor is evaluating whether to assign a CVE to the vulnerability. It’s unclear how many customers are affected and who may be behind the exploitation attempts. SecurityWeek has reached out to ServiceNow for clarification and will update this article if the company responds. One individual reported on Reddit that their company’s security team informed ServiceNow about the vulnerability last week. The same individual said the vendor appeared to have known about the issue since April 7 but did not view it as a risk. UPDATE: ServiceNow has responded to SecurityWeek’s inquiry, clarifying that it has now published an advisory accessible to everyone. Importantly, the company pointed out that the exploitation has been attributed to security researchers rather than attackers. “Based on our investigation to date, we believe the observed activity is attributable to security researchers or customer research,” the company said. “We are in contact with the researchers, and they have advised their activity was solely for bug bounty submissions and no data was used or retained.” *the first paragraph has been updated to remove the words ‘by attackers’ Related: ServiceNow to Acquire Armis for $7.75 Billion in Cash Related: No Patch Planned for Exploited Arista EOS Vulnerability Related: Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unauthorized access to susceptible instances. "On June 5, 2026, ServiceNow applied a security update to hosted customer instances," the company revealed in an advisory that requires customer access. "The update concerned a security issue that could allow an unauthenticated user, in certain circumstances, to gain greater access to ServiceNow instances than intended." The security update makes changes to an endpoint configuration to limit this access to authenticated users. The security flaw currently does not have a CVE identifier. Details of the issue first emerged on Reddit. ServiceNow said it detected anomalous activity relating to the security issue, and that it observed evidence of successful queries of instance tables against a "subset of customers." Impacted customers have been notified, it added. "The security issue pertains to customers who are on the Australia platform release or made certain configuration changes to instances on releases prior to Australia," it noted. A Reddit comment from a user named "d3s7iny" claimed that its security team reported the vulnerability to ServiceNow, adding that the software company had been aware of the problem internally since April 7, 2026. For about two months, ServiceNow is said to have classified it as a non-urgent issue, with plans to remediate it in a future update. When reached for comment, a ServiceNow spokesperson said "our main priority was to reach out directly to the subset of customers this [incident] affected, it was not broad." The company has since publicly acknowledged in an advisory that "a subset of customer instances were queried successfully as part of this activity." The malicious activity is said to have commenced on June 2, 2026. "On June 3-4, 2026, customers shared submissions to their bug bounty programs regarding a security issue that could, in certain circumstances, allow an unauthenticated user to gain unwanted access to information in ServiceNow instances," it added. "These submissions were similar to a confidential submission sent to our bug bounty program on April 22, 2026." (The story was updated after publication to include a response from ServiceNow and details of the security issue.)

Update 6/10/26: Added details below from a new ServiceNow advisory regarding the observed activity and bug bounty submissions. ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from customer instances. The company quietly warned impacted customers through a support bulletin and direct support cases after detecting "anomalous activity" related to the issue. The bulletin, which is hidden behind ServiceNow's customer support login portal, states that the company applied a security update to hosted customer instances on June 5, 2026. "On June 5, 2026, ServiceNow applied a security update to hosted customer instances," reads the support bulletin. "The update concerned a security issue that could allow an unauthenticated user, in certain circumstances, to gain greater access to ServiceNow instances than intended." The company says this security update changes the API endpoint configuration to limit access to authenticated users only. ServiceNow also confirmed that attackers exploited this flaw to successfully query the customer instance tables. While ServiceNow did not disclose which data was accessed during the attacks, instances commonly store sensitive enterprise information, including IT support tickets, employee records, internal documentation, asset inventories, security incident reports, workflow data, and configuration details for corporate systems and services. Support case information has become an increasingly popular target for threat actors, as tickets can contain credentials, API tokens, internal documentation, and authentication secrets shared during troubleshooting. According to the advisory, ServiceNow has now opened support cases with affected customers. If a customer has not received one, they are not believed to be affected by the incident. While ServiceNow has not publicly disclosed technical details about the flaw, administrators discussing the incident on Reddit say the issue appears to be tied to a REST endpoint at '/api/now/related_list_edit/create'. One commenter claimed the endpoint was configured with 'requires_authentication=false', potentially allowing unauthenticated requests to access instance data. The security update released on Friday was allegedly used to set requires_authentication to true. Numerous admins shared indicators of compromise, including API requests from the IP address '51.159.98.241,' advising other administrators to review logs for requests to the vulnerable endpoint. The bulletin states the issue primarily impacts customers running the Australia platform release or customers on older releases who made certain configuration changes. "The security issue pertains to customers who are on the Australia platform release or made certain configuration changes to instances on releases prior to Australia," ServiceNow warned. BleepingComputer contacted ServiceNow earlier today after a reader alerted us to the incident, asking how long the activity had been ongoing, what caused the issue, and whether customer data had been stolen. We did not receive a response before publication. ServiceNow says it is still evaluating whether it will publish a CVE for the issue. Administrators are advised to review ServiceNow logs for requests to /api/now/related_list_edit, particularly from the IP address 51.159.98.241. Impacted organizations should review exposed tickets and records for sensitive information, rotate credentials or tokens shared through support workflows, and ensure API logging is enabled. Update 6/10/26: ServiceNow has published an advisory stating it believes the observed activity was likely tied to security researchers or customer-led research associated with bug bounty submissions rather than malicious threat actors. The company also disclosed that it received a confidential bug bounty submission describing a similar issue on April 22, 2026, but did not apply a security update until June 5, after activity targeting customer instances reportedly began days earlier. BleepingComputer asked ServiceNow what delayed the deployment of the security update and will update this article if a response is received. Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply. The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report

ServiceNow strengthens enterprise AI security with Autonomous Security & Risk platform ServiceNow has launched Autonomous Security & Risk to govern every AI agent, identity, and connected asset. Armis delivers continuous asset intelligence across code, IT, OT, IoT, and connected assets, while Veza provides fine-grained visibility, intelligence, and governance for both human and non-human identities. Security and risk crossed $1 billion in annual contract value (ACV) for ServiceNow last year, making it one of the fastest-growing sources of demand on the ServiceNow AI Platform. The pressure is compounding as AI exponentially multiplies identities, permissions, connected assets, and decisions that require governance. AI agents acquire access, execute decisions, and operate at machine speed, and the non-human identities behind them already vastly outnumber human ones. Who approved that access, why it exists, and whether it remains valid are questions most enterprises cannot answer. Disconnected security tools cannot close this gap; a platform approach can. “Today’s CISOs have to operate at two speeds: neutralizing threats in real time while reporting risk to the board with conviction,” said John Aisien, SVP and GM, Central Product Management, Security & Risk, ServiceNow. “Autonomous Security & Risk replaces that fragmented stack with a single graph that maps every identity, every permission, and every connected asset, so prevention, detection, and response happen at machine speed.” Every AI agent is an identity, with most ungoverned Every AI agent that acts inside an enterprise does so through an identity. It accesses systems, reads data, and executes workflows under a set of permissions that were almost certainly designed for human actors, rather than the speed, scale, or autonomy of AI agents. Closing the identity visibility, intelligence, and governance gap is critical. Veza’s Access Graph provides a continuous, real-time map of every access relationship across an enterprise environment, including what has access, what it can do with that access, and how these change as context shifts, systems evolve, and agents multiply. With Veza now integrated into the ServiceNow AI Platform, this capability governs both human and non-human identities within a single operational framework: surfacing risk, enforcing least privilege at the point of action, triggering downstream remediation, and building the traceable institutional memory that auditors and regulators require. ServiceNow Veza works in concert with ServiceNow’s existing vulnerability, exposure, and incident management capabilities to close pre-breach & post-breach exposure: governing who and what has access and continuously identifying and remediating permission-related vulnerabilities. You cannot secure what you cannot see Asset visibility has always been a foundational requirement of enterprise security, along with a persistent failure point. The environments enterprises operate in today span pre-compiled code, IT infrastructure, operational technology, connected devices, cloud workloads, medical equipment, and now AI agents, interacting across boundaries that no single tool was ever meant to fully see. Once integrated into ServiceNow, Armis will deliver real-time, contextual awareness of every connected cyber asset, including the devices and systems conventional tools had no visibility into. Armis will monitor network traffic without agents, without disrupting operations, and enrich every asset record with device type, classification, firmware version, behavioral data, and real-time risk posture. This intelligence flows directly into the ServiceNow CMDB, turning a hitherto static inventory into a live picture of the actual attack surface. When an asset is found to be vulnerable, misconfigured, or behaving anomalously, ServiceNow responds at machine speed, in accordance with prevalent environmental context. Together, Veza and Armis boost ServiceNow’s standing as a platform that knows what exists in the environment and who or what is permitted to interact with it. This real-time asset intelligence feeds directly into ServiceNow’s security incident response workflows, so the same context used to assess risk before a breach is immediately available to contain it after. The blueprint for trusted AI When AI acts inside an enterprise, it must do so with the full business reality behind every decision, including governed permissions, continuous oversight, and an audit trail that holds under scrutiny. That is what Autonomous Security & Risk delivers. Asset intelligence, identity governance, risk management, and workflow automation operating as a single system, with AI running across all of it. Two new AI specialists, announced as part of ServiceNow’s autonomous workforce expansion, handle vulnerability resolution and security operations end to end, autonomously addressing unresolved vulnerability backlogs and investigating phishing incidents alongside human teams. The ServiceNow AI Control Tower governs agents, ensuring they are inventoried from the moment they appear, risk-scored continuously, and least privilege enforced in real time. Evaluations score agents as they run. If something drifts, the AI Control Tower is able to catch it before it compounds. A2A and MCP interoperability means any agent, on any platform, operates within a governed framework that connects decisions to context and accountability to action. That same governed framework extends across ServiceNow’s partner ecosystem, so the third-party security tools enterprises already rely on feed into a continuously updated picture of enterprise posture. ServiceNow’s own security operations team runs Autonomous Risk & Security, handling incidents seven times faster than prior workflows using AI agents, with every action documented and every decision traceable. Organizations are already seeing results on the ServiceNow AI Platform. A global energy company operating across 70+ countries saved 1.2 million hours by automating security operations and cut the time it takes to contain threats by 97%. A major U.S. financial services institution eliminated 96% of dormant non-human identities, turning least privilege from a policy goal into an enforced reality. A Fortune 100 aerospace manufacturer reduced the time to complete control attestations by 75% and close compliance gaps by 85%, replacing manual audit prep with evidence that captures itself. Enterprises that establish this foundation of visibility, governed identities, integrated risk, and autonomous response will be decisively ahead as AI accelerates further. ServiceNow gives security and risk leaders a single view of how exposure, incidents, and identity decisions translate to enterprise risk posture in real time, with the audit trail regulators require. “As the attack surface expands, real-time visibility and control over every asset is non-negotiable. ServiceNow’s acquisition of Armis enables a powerful three-way partnership with Fortinet, advancing cybersecurity into an AI-driven, autonomous system that helps organizations continuously understand assets, prioritize threats, and execute response in real time,” said John Whittle, chief operating officer at Fortinet. “With Fortinet’s industry-leading AI-driven innovation at scale, combined with our long-standing relationships and deep integrations across both platforms, we can drive ServiceNow security workflows with precision—delivering faster, closed-loop protection and more consistent, accurate response for our customers,” Whittle concluded.

In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber espionage campaign against 30 global targets. The AI handled 80-90% of tactical operations on its own, performing reconnaissance, writing exploit code, and attempting lateral movement at machine speed. This incident is worrying, but there's a scenario that should concern security teams even more: an attacker who doesn't need to run through the kill chain at all, because they've compromised an AI agent that already lives inside your environment. One that already has the access, the permissions, and a legitimate reason to move across your systems every day. A Framework Built for Human Threats The traditional cyber kill chain assumes attackers have to earn every inch of access. It's a model developed by Lockheed Martin in 2011 to describe how adversaries move from initial compromise to their ultimate objective, and it's shaped how security teams think about detection ever since. The logic is simple: attackers need to complete a sequence of steps, and defenders can interrupt the chain at any point. Every stage an attacker has to pass through is another opportunity to catch them. A typical intrusion moves through distinct stages: Initial access (exploiting a vulnerability, etc.) Persistence without triggering alerts Reconnaissance to understand the environment Lateral movement to reach valuable data Privilege escalation when access isn't sufficient Exfiltration while avoiding DLP controls Each stage creates detection opportunities: endpoint security might catch the initial payload, network monitoring might spot unusual lateral movement, identity systems might flag a privilege escalation, and SIEM correlations might tie together anomalous behaviors across systems. The more steps an attacker takes, the more chances there are to trip a wire. This is why advanced threat actors like LUCR-3 and APT29 invest heavily in stealth, spending weeks living off the land and blending into normal traffic. Even then, they leave artifacts: unusual login locations, odd access patterns, slight deviations from baseline behavior. These artifacts are exactly what modern detection systems are engineered to find. The problem here, though, is that AI agents don't really follow this playbook. What an AI Agent Already Has AI agents operate fundamentally differently from human users. They work across systems, move data between applications, and run continuously. If compromised, an attacker bypasses the entire kill chain - the agent itself becomes the kill chain. Think about what an AI agent typically has access to. Its activity history is a perfect map of what data exists and where it resides. It probably pulls from Salesforce, pushes to Slack, syncs with Google Drive, and updates ServiceNow as part of its normal workflow. It was granted broad permissions at deployment, often admin-level access across multiple applications, and it already moves data between systems as part of its job. An attacker who compromises that agent inherits all of it instantly. They get the map, the access, the permissions, and a legitimate reason to move data around. Every stage of the kill chain that security teams have spent years learning to detect? The agent skips all of them by default. The Threat Is Already Playing Out The OpenClaw crisis showed us what this looks like in practice: Roughly 12% of skills in its public marketplace were malicious. A critical RCE vulnerability allowed one-click compromise. Over 21,000 instances were publicly exposed. But the scarier part was what a compromised agent could access once it was connected to Slack and Google Workspace: messages, files, emails, and documents, with persistent memory across sessions. The main problem is that security tools are designed to detect abnormal behavior. When an attacker rides an AI agent's existing workflow, everything looks normal. The agent is accessing the systems it always accesses, moving the data it always moves, operating at the times it always operates. This is the detection gap security teams are facing. How Reco Closes the Visibility Gap Defending against compromised AI agents starts with knowing which agents are operating in your environment, what they connect to, and what permissions they hold. Most organizations have no inventory of the AI agents touching their SaaS ecosystem. This is exactly the kind of problem Reco was built to solve. Discover Every AI Agent in Play Reco’s Agentic AI Security discovers every AI agent, embedded AI feature, and third-party AI integration across your SaaS environment, including shadow AI tools connected without IT approval. Map Access Scope and Blast Radius For each agent, Reco maps which SaaS apps it connects to, what permissions it holds, and what data it can access. Reco’s SaaS-to-SaaS visualization shows exactly how agents integrate across your application ecosystem, surfacing toxic combinations where AI agents bridge systems together through MCP, OAuth, or API integrations, creating permission breakdowns that no single application owner would authorize. Flag Targets, Enforce Least Privilege Reco identifies which agents represent your biggest exposure by evaluating permission scope, cross-system access, and data sensitivity. Agents associated with emerging risks are automatically labeled. From there, Reco helps you right-size access through identity and access governance, directly limiting what an attacker can do if an agent is compromised. Detect Anomalous Agent Activity Reco’s threat detection engine applies identity-centric behavioral analysis to AI agents the same way it does to human identities, distinguishing normal automation from suspicious deviations in real time. What This Means for Your Team The traditional kill chain assumed that attackers had to fight for every inch of access. AI agents upend that assumption entirely. One compromised agent can give an attacker legitimate access, a perfect map of the environment, broad permissions, and built-in cover for data movement, without a single step that looks like an intrusion. Security teams that are still focused exclusively on detecting human attacker behavior are going to miss this. The attackers will be riding your AI agents' existing workflows, invisible in the noise of normal operations. Sooner or later, an AI agent in your environment will be targeted. Visibility is the difference between catching it early and finding out during incident response. Reco gives you that visibility, across your entire SaaS ecosystem, in minutes. Learn more here: Request a Demo: Get Started With Reco.

Bonfy ACS 2.0 helps organizations control data use in AI environments Bonfy.AI announced Bonfy Adaptive Content Security (Bonfy ACS) 2.0, a platform built to secure enterprise content across all systems, applications, and AI agents – anywhere data moves, resides, or is processed. As organizations race to deploy copilots, custom AI apps, and increasingly autonomous AI agents, security leaders are struggling with blind spots around how these systems access, transform, and share sensitive data, gaps that legacy DLP and DSPM tools were never designed to handle. By 2028, Gartner projects that 22% of cyberattacks and data leaks will involve generative AI, and through 2029 over 50% of successful cybersecurity attacks against AI agents will exploit access‑control issues. Bonfy delivers real-time, contextual protection across email, SaaS apps, collaboration tools, browsers, cloud and on‑prem file stores, AI systems, and agent frameworks, so enterprises can safely accelerate AI adoption without flying blind. With native coverage for Microsoft 365 (Exchange Online, SharePoint, Entra, Copilot and Purview), Google Workspace (Gmail, Google Drive, Google Directory), Salesforce, HubSpot, Slack, on‑premises file stores, AWS S3, and more, Bonfy becomes the unifying data security layer that follows content regardless of channel or AI workflow. “AI agents are about to become the biggest catalyst in our market, and the biggest new attack surface enterprises have seen in a decade,” said Gidi Cohen, co-founder and CEO of Bonfy. “They read, write, click, send, and connect to everything. Our mission with Bonfy 2.0 is simple: protect the data across that entire lifecycle, no matter which agent, platform, or workflow is in play.” Built for agentic and autonomous AI Bonfy ACS 2.0 is engineered specifically for system‑level and browser‑based AI agents that plan, reason, call tools, and execute actions across enterprise systems. By treating agents as first‑class entities, not just extensions of users, Bonfy allows security teams to see which agents accessed which data, how they used it, and where the outputs ultimately landed. Bonfy ACS 2.0 fits cleanly into a customer’s existing security and productivity stack: it complements Microsoft Purview and M365 DLP, integrates with Microsoft Entra and Google Directory, and plugs into SIEM/SOAR tools such as Splunk, Sentinel, and Rapid7 for workflow automation, while also integrating via its MCP Server interface and APIs with modern AI platforms including Microsoft Copilot Studio, OpenAI, Anthropic Claude, Google Gemini, and other enterprise agent frameworks. Bonfy is designed for executive level visibility and governance for CISOs, CIOs, and to be operated by security teams, security architects, and AI platform teams responsible for GenAI and agent deployments in financial services, insurance, technology, biotech/pharmaceutical, healthcare companies, and more. It provides one policy and automation engine that spans traditional data security, AI data governance, and AI agent guardrails, eliminating the need to stitch together separate point products for systems, and agents. The Bonfy platform can be used both for projects where organizations consume AI and build AI. “The AI agent factory is already here,” said Tal Hornstein, CISO of Cast & Crew. “Microsoft, Google, Salesforce, ServiceNow, and the hyperscalers are all shipping frameworks for building agents. Bonfy gives enterprises a way to say: Yes, we want the productivity, but we’re not willing to lose control of our data to get it.” Headline capabilities in Bonfy ACS 2.0 Bonfy ACS 2.0 introduces six major capabilities that together form a second-generation, high‑performance data security platform for the AI era. AI agent data guardrails (MCP and agent framework support) Bonfy adds “data in use” security solution by adding an MCP server interface, API, and agent‑aware controls so enterprises can inspect and govern the content AI agents read, share, and generate during planning, reasoning, and execution, not just in the final output. Agents can call Bonfy inline to label and risk‑score content before it reaches external services or users, stopping AI‑driven leakage and trust‑boundary violations. Browser extension for Shadow AI and agentic activity A lightweight browser extension delivers real‑time, content‑aware inspection of web traffic, including unsanctioned AI tools and browser‑based assistants. Bonfy separates safe AI use from risky disclosure, detects shadow AI automations, and shows security teams exactly where sensitive data is going. Full Google workspace support Bonfy 2.0 adds native support for Gmail, Google Drive, and Google Directory, achieving parity with Microsoft 365 integrations and extending multi‑channel protection across both ecosystems. Organizations running on Google get unified, entity‑aware controls including contextual, automated classification labeling. Data surface visibility for AI-era risk A new “data surface visibility” view gives CISOs a live map of where sensitive content lives across data stores such as Microsoft SharePoint, Google Drive, AWS S3 buckets, On-prem file stores and AI systems, and how employees and agents use it. Teams can drill from high‑level exposure down to specific actors and flows to understand real business risk, not just isolated events. On-premises and cloud file store coverage Bonfy covers on‑premises file stores and cloud object storage such as AWS S3, alongside existing SharePoint, Google Drive and other SaaS applications. This creates a unified control plane for unstructured data at rest, in motion, and in use. Data minimization, encryption enhancements, and SOC 2 Bonfy 2.0 tightens data minimization, encryption, and configurable retention so the platform itself has a smaller, better‑protected footprint. Completing SOC 2 Type 2 certification as part of the release reinforces Bonfy’s readiness for highly regulated industries. “System-level agents won’t run on endpoints you control. They’ll run in compute infrastructure provided by Microsoft, Google, OpenAI, Anthropic, Salesforce, and everywhere else your data already lives, thereby making it extremely simple and straightforward for these agents to access that data (and more) through available tools to enhance their learning with enterprise-specific data” said Vishnu Varma, Head of Product, Bonfy. “Endpoint-, browser-only DLP can’t see that world. Bonfy was built as a multi-channel platform precisely so we can protect content wherever those agents operate.” Bonfy ACS 2.0 is available immediately. RSAC 2026 attendees can schedule a live demo by contacting Vishnu Varma.

AppViewX acquires Eos to extend identity security to AI agents and workloads AppViewX has acquired Eos, an AI-native identity control plane for AI agents and autonomous workloads within the enterprise. By combining AppViewX’s automated CLM and PKI with Eos’s agentic governance and privileged access control, the platform delivers an integrated solution for AI agent and machine identity security. The acquisition accelerates AppViewX’s evolution into an AI-native platform, positioning the company as a leader in securing machines, workloads, and AI agents in cloud and hybrid environments. Additionally, Archit Lohokare, CEO of Eos, has been appointed CEO of AppViewX, succeeding Dino DiMarino, who has stepped down as the company’s CEO to pursue other opportunities. Mr. Lohokare brings more than two decades of experience in cybersecurity across identity security, data security, and endpoint security. Prior to founding Eos, Mr. Lohokare was the SVP and GM of the workforce and endpoint security business at CyberArk, where he was instrumental in creating CyberArk’s Identity Security Platform. His expertise in identity security will guide AppViewX through its next phase of platform expansion in the AI and quantum era. “AI agents are increasingly acting with autonomy inside the enterprise, with privileged access to data, applications, infrastructure, and cloud environments,” said Archit Lohokare, CEO of AppViewX. “Identity is the control plane for this new era. As organizations rapidly deploy AI agents, they need a unified governance and risk layer that secures machines and AI agents with consistent visibility, policy, and enforcement. By combining AppViewX’s leadership in machine identity with Eos’s AI-native capabilities, we are building the next-generation platform enterprises need to innovate confidently and securely at AI scale.” Additionally, Kashyap Ivaturi, CTO of Eos, will be joining AppViewX as CTO and Madhu Venkatarajan, current AppViewX CTO, will be assuming the role of Chief Engineering Officer and GM of India Operations, focusing on scaling engineering excellence, accelerating product delivery, and strengthening AppViewX’s India-based innovation and execution capabilities. Mr. Ivaturi has led large-scale global enterprise engineering organizations at CyberArk and ServiceNow and brings extensive experience building secure, scalable SaaS platforms for global enterprises. His leadership will accelerate AppViewX’s product innovation and AI-native roadmap. “As organizations scale AI agents and autonomous workloads, the identity-driven attack surface expands dramatically,” said Ian Loring, Senior Managing Director & Executive Chair at Haveli Investments. “AppViewX has established leadership in machine identity management, and the addition of Eos accelerates its evolution into a unified platform that governs machines, AI workloads, and autonomous agents. We are confident that this combination, in addition to Archit’s and Kashyap’s leadership of the new company, will position AppViewX for long-term category leadership and durable growth.” “AI agents are a new identity group, and their rapid proliferation creates new risks for the enterprise,” said John Barrow, CISO at JB Poindexter. “These agents often behave non-deterministically. To reduce risk, we must monitor, audit, and control their privileged access to sensitive data and systems and ensure their lifecycle is automated and governed. I’m excited to see AppViewX and Eos come together. Eos’s AI agent Identity Security platform combined with AppViewX’s Machine Identity Security platform positions AppViewX as the leader in Machine and AI Agent Identity Security.” The acquisition of Eos adds to AppViewX’s growing market momentum and leadership recognition from both the IDC MarketScape for Certificate Lifecycle Management (CLM) and KuppingerCole’s Non-Human Identity Management (NHIM) Leadership Compass.

SAP has released security updates to address two critical security flaws that could be exploited to achieve arbitrary code execution on affected systems. The vulnerabilities in question listed below - CVE-2019-17571 (CVSS score: 9.8) - A code injection vulnerability in SAP Quotation Management Insurance application (FS-QUO) CVE-2026-27685 (CVSS score: 9.1) - An insecure deserialization vulnerability in SAP NetWeaver Enterprise Portal Administration "The application uses an outdated artifact of Apache Log4j 1.2.17 that is vulnerable to CVE-2019-17571," SAP security company Onapsis said. "It allows an unprivileged attacker to execute arbitrary code remotely on the server, causing high impact on confidentiality, integrity, and availability of the application." CVE-2026-27685, on the other hand, stems from missing or insufficient validation during the deserialization of uploaded content, which could allow an attacker to upload untrusted or malicious content. "Only the fact that an attacker requires high privileges for a successful exploit prevents the vulnerability from being tagged with a CVSS score of 10," Onapsis added. The disclosure comes as Microsoft shipped patches for 84 vulnerabilities across products, including dozens of privilege escalation and remote code execution flaws. On Tuesday, Adobe also announced patches for 80 vulnerabilities, four of which are critical flaws impacting Adobe Commerce and Magento Open Source that could result in privilege escalation and security feature bypass. Separately, it fixed five critical vulnerabilities in Adobe Illustrator that could pave the way for arbitrary code execution. Elsewhere, Hewlett Packard Enterprise put out fixes for five shortcomings in Aruba Networking AOS-CX. The most severe of the flaws is CVE-2026-23813 (CVSS score: 9.8), an authentication bypass affecting the management interface. "A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls," HPE said. "In some cases, this could enable resetting the admin password." "Exploitation of this Aruba vulnerability potentially gives attackers full control of AOS-CX network devices and the ability to compromise an entire system undetected," Ross Filipek, CISO at Corsica Technologies, said in a statement. "A successful compromise could lead to the disruption of network communications or the erosion of the integrity of key business services. This flaw is a reminder that vulnerabilities in network devices are becoming more common in today's hyper-connected world. When attackers gain privileged access to these devices, it puts organizations at significant risk." Software Patches from Other Vendors Security updates have also been released by other vendors over the past few weeks to rectify several vulnerabilities, including — ABB Amazon Web Services AMD Arm Atlassian Bosch Broadcom (including VMware) Canon Cisco Commvault Dassault Systèmes Dell Devolutions Drupal Elastic F5 Fortinet Fortra Foxit Software GitLab Google Android and Pixel Google Chrome Google Cloud Google Pixel Watch Google Wear OS Grafana Hitachi Energy Honeywell HP HP Enterprise (including Aruba Networking and Juniper Networks) IBM Intel Ivanti Jenkins Lenovo Linux distributions AlmaLinux, Alpine Linux, Amazon Linux, Arch Linux, Debian, Gentoo, Oracle Linux, Mageia, Red Hat, Rocky Linux, SUSE, and Ubuntu MediaTek Mitsubishi Electric Moxa Mozilla Firefox, Firefox ESR, and Thunderbird n8n NVIDIA Palo Alto Networks QNAP Qualcomm Ricoh Samsung Schneider Electric ServiceNow Siemens SolarWinds Splunk Synology TP-Link Trend Micro WatchGuard Western Digital Zoom, and Zyxel

SailPoint expands AI-powered identity security with adaptive identity framework SailPoint announced significant advancements to its AI-powered SailPoint Platform, introducing the first in a series of capabilities that advance its adaptive identity vision, an approach designed to address the critical security challenges of IT environments. New features include: Privilege: SailPoint is delivering total visibility into privilege risk with the launch of privilege discovery and classification and privilege insights, new foundational capabilities that automatically discover, classify, and provide the intelligence to secure privileged access across the enterprise. Non-human identities: New connectors for SailPoint Agent Identity Security can discover and govern AI agents from platforms like Microsoft 365 Co-Pilot and Databricks, in addition to Amazon Bedrock, Google Vertex AI, Microsoft Foundry, Salesforce Agentforce, ServiceNow AI Platform, and Snowflake Cortex AI. Additionally, SailPoint Machine Identity Security is enhanced with full lifecycle management for traditional machine accounts. Agents: The new agent for SailPoint Harbor Pilot, SailPoint’s suite of AI-powered agents designed to revolutionize how SailPoint Identity Security Cloud customers manage their programs, transforms a historically complex process into a simple, guided conversation. It enables users to request access in a simple, guided conversation. Advancements to SailPoint Observability & Insights and SailPoint Data Access Security: New advanced Observability & Insights features deliver direct privilege visibility and risk detection within the SailPoint Identity Graph, identity comparisons, and advanced operational intelligence across all identities. SailPoint is also integrating Data Access Security with the Identity Graph to visualize data access pathways, expand context for identity and data access, and add new capabilities to map and manage sensitive data exposure. Modernization: A next-generation Access Certification engine and a comprehensive Separation of Duties (SoD) revamp, demonstrating a commitment to rebuilding foundational governance capabilities for performance, scale, and modern user experiences. These will be available in the second half of 2026. Identity governance, which relies on slow, manual reviews, can no longer keep pace with the speed of cloud adoption, the explosion of AI and machine identities, and the sophistication of modern threats. “The old way of identity governance is simply no longer effective. It’s not enough to rely on static, after-the-fact reviews in today’s dynamic threat landscape,” said Chandra Gnanasambandam, SailPoint EVP of Product and Chief Technology Officer. “As a market leader, we are moving toward a new, AI-powered adaptive approach to provide continuous visibility and real-time governance for all identity types, including AI identities, machines, agents, and credentials. This year, we aim to help our customers move to least privilege or zero standing privilege. It’s about truly securing the business, not just checking a box, at the speed that AI-driven enterprises demand,” Gnanasambandam continued. SailPoint’s adaptive identity framework is built on four key pillars: Real-time governance: Shifting from periodic reviews to continuous, automated governance that can detect, prevent, and remediate risk the moment it appears. Protecting AI and machines: Extending identity security beyond human users to the rapidly growing population of non-human identities, including AI agents, service accounts, and machine workloads. Universal and dynamic privilege: Reducing the risk of standing privilege by providing Just-in-Time (JIT) access across all enterprise environments, ensuring identities only have the specific access they need, for the minimum time required. Integrated threat management: Bridging the critical gap between identity management and the Security Operations Center (SOC) by correlating identity context with threat signals to detect and respond to threats faster. “Leveraging SailPoint’s AI capabilities, TMF Group has elevated identity governance into a fully automated, intelligence‑driven capability ensuring consistent compliance across 87 jurisdictions while supporting secure global growth,” said Saurabh Gugnani, Senior Director, Global Head, Cybersecurity Engineering, Architecture & Projects at TMF Group.

Cybersecurity jobs available right now: March 10, 2026 Associate Director Application Security BioNTech | Germany | On-site – No longer accepting applications As an Associate Director Application Security, you will lead application security strategy, standardize security processes, and drive vulnerability management across development environments. You will enable secure-by-design practices through technical solutions and advisory support, oversee secure onboarding of open-source software, and define KPIs to measure security effectiveness. CISO AIG | Israel | On-site – No longer accepting applications As a CISO, you will enterprise-wide cybersecurity strategy, policies, and operations while aligning security initiatives with business goals. You will ensure regulatory compliance, adapt global standards to local requirements, manage risk through assessments and testing, evaluate emerging technologies, and report security posture and KPIs to executive leadership and the board. You will also lead incident response, business continuity, and disaster recovery programs. Cloud Security Professional ServiceNow | Italy | Hybrid – No longer accepting applications As a Cloud Security Professional, you will strengthen cloud security by supporting incident response and investigations, resolving security issues with internal teams, conducting postmortems, and driving architectural improvements to enhance the cloud environment. You will engage with customers through pre- and post-sales security activities, manage incident handling and remediation, provide strategic security guidance and industry advocacy, and lead cross-functional security initiatives including team coordination and contract support. Get weekly updates on new cybersecurity job openings. Subscribe here! Cyber Compliance Analyst Inchcape Shipping Services | India | On-site – No longer accepting applications As a Cyber Compliance Analyst, you will monitor and ensure compliance with cybersecurity regulations and standards, develop and maintain security policies and controls, and conduct assessments to identify risks and gaps with recommended corrective actions. You will lead responses to external audits, collaborate with global teams to implement compliance improvements, and support certification processes to maintain organizational compliance and security. Cyber Security Engineer Ocean Infinity | United Kingdom | On-site – No longer accepting applications As a Cyber Security Engineer, you will act as a primary liaison for auditors, regulators, defence stakeholders, and customers while maintaining compliance with security frameworks and standards. You will coordinate audits and remediation, manage compliance artefacts, translate regulatory obligations into technical requirements, and oversee cyber risk across enterprise, cloud, and OT environments through assessments, policies, and reporting. You will also support secure defence procurement and conduct third-party and supply chain security assessments. Cyber Security Team Lead – SOC & GRC VaporVM | UAE | On-site – No longer accepting applications As a Cyber Security Team Lead – SOC & GRC, you will lead 24/7 SOC operations, oversee SIEM platforms and threat detection, and drive incident response, root cause analysis, performance metrics, and proactive threat hunting. You will also lead enterprise cybersecurity programs, guide security architecture and cloud security strategy, align initiatives with business goals, and manage governance, risk, and compliance through policies, risk assessments, regulatory alignment, and audits. Cybersecurity Analyst Canadian Cancer Society | Canada | Hybrid – No longer accepting applications As a Cybersecurity Analyst, you will monitor and maintain security solutions, respond to alerts and incidents, research emerging threats, and support vulnerability management. You will maintain security policies, strengthen cybersecurity awareness programs with measurable KPIs, and deliver regular reporting on threats and remediation efforts. You will also provide advanced investigation and escalation support, assess new technologies for security compliance, collaborate with technology teams to remediate issues, and continuously monitor and improve security operations. Cybersecurity Intern Bitstack | France | Hybrid – No longer accepting applications As a Cybersecurity Intern, you will support identity and access management, help secure company devices through MDM and endpoint controls, and assist with integrating and monitoring security tools in CI/CD pipelines. You will contribute to compliance documentation and audits, support security awareness initiatives, and assist in incident investigations by analyzing suspicious activity. Cybersecurity Senior Manager Eraneos | Germany | On-site – No longer accepting applications As a Cybersecurity Senior Manager, you will build trusted executive relationships and advise leaders on cyber risk, resilience, and transformation. You will shape and deliver cybersecurity programs spanning strategy, risk and compliance, identity and zero trust, cloud and application security, threat detection and response, data security and privacy, vulnerability and offensive security, OT/ICS protection, and end-to-end program management. Data Governance Lead Abu Dhabi Airports | UAE | On-site – No longer accepting applications As a Data Governance Lead, you will develop and implement data governance frameworks to ensure data accuracy, integrity, and security while defining standards, policies, and procedures with cross-functional teams. You will enforce governance policies to manage data risks, lead data quality initiatives such as profiling and cleansing, and guide business units on best practices and data privacy requirements. Head of Cyber Security Bestway Group | United Kingdom | On-site – No longer accepting applications As a Head of Cyber Security, you will develop and own the organization’s security strategy and roadmap, represent security at senior leadership and board levels, and define robust security policies, frameworks, and operating models. You will ensure compliance with relevant regulations and best practices, lead operational security and incident response to ensure effective containment and recovery, and manage enterprise security risk through assessments, key risk indicators, and regular exposure reporting. Information Security Engineer Fireblocks | Israel | Hybrid – No longer accepting applications As an Information Security Engineer, you will implement and manage security controls across endpoints, SaaS, and networks, monitor and respond to incidents, and translate security requirements into practical technical configurations. You will manage security tools, investigate threats, harden systems, build effective detections, collaborate with technical teams, and continuously improve security effectiveness with clear, pragmatic documentation. Information Security Lead McNab | Australia | On-site – No longer accepting applications As an Information Security Lead, you will establish and evolve the organization’s information security operating model while developing and maintaining security policies, governance, and risk frameworks. You will embed cybersecurity into major technology initiatives, manage and report organizational cyber risks, coordinate internal and external security capabilities, and lead incident response planning and crisis readiness, including executive communication during cyber incidents. Insider Threat Security Analyst Old National Bank | USA | On-site – No longer accepting applications As an Insider Threat Security Analyst, you will enhance the Insider Threat Program by strengthening prevention, detection, response, and awareness efforts. You will develop policies and workflows, track program effectiveness through metrics and reporting, stay current on regulations and emerging insider risks, and work with business units to protect sensitive data using DLP controls and user behavior analytics. Intern – Information Security Navigant Credit Union | USA | On-site – No longer accepting applications As an Intern – Information Security, you will assist in maintaining risk management tools and documentation while gaining exposure to risk assessments and reporting concepts. You will support reporting activities that analyze trends, risks, and control effectiveness, and help maintain and review information security policies and procedures to ensure alignment with regulatory guidance and industry best practices. IT Incident Manager MSC Cruises | Italy | On-site – No longer accepting applications As an IT Incident Manager, you will lead end-to-end incident response to restore services quickly and minimize business impact while coordinating technical teams and service providers. You will manage incident communications, analyze trends to identify systemic issues, collaborate with service and IT operations teams to improve stability, and drive continuous improvement of incident management processes. Lead Cyber Security Engineer Davies | India | On-site – No longer accepting applications As a Lead Cyber Security Engineer, you will lead and support cyber security engineers and analysts, serve as an escalation point for incidents, and oversee operational IT security including monitoring and maintaining tools such as SIEM, endpoint protection, and vulnerability management platforms. You will assist with team task planning, review and update technical policies, assess and validate new vulnerabilities, support risk-based security improvements with the CISO, contribute to security gap and risk assessments against recognized frameworks, and produce KPI and KRI reports. Network Security Engineer Specsavers | Australia | On-site – No longer accepting applications As a Network Security Engineer, you will serve as a subject matter expert and escalation point for network security incidents while maintaining secure configurations across firewalls, routers, switches, VPNs, and related platforms. You will review and optimize firewall rules, drive automation and continuous improvement, collaborate with Security Operations to analyze traffic and detect threats, and manage vulnerabilities, patching, and access controls to ensure a secure and compliant network environment. Offensive Security Consultant – Penetration Testing RSM Canada | Canada | On-site – View job details As an Offensive Security Consultant – Penetration Testing, you will assess the strengths and weaknesses of client IT environments using commercial and open-source security testing tools. You will conduct internet and network penetration tests (blackbox, greybox, and whitebox), perform specialized assessments such as wireless, social engineering, mobile, and embedded device testing, and help develop remediation recommendations for identified vulnerabilities. Product Security Engineer KKR | Ireland | On-site – No longer accepting applications As a Product Security Engineer, you will perform application security assessments and penetration tests to identify vulnerabilities and work closely with development teams to embed secure coding practices throughout the SDLC. You will design and implement application security controls, provide guidance on security best practices, stay current on emerging threats and countermeasures, support incident response for application security events, deliver developer security training, and maintain application security standards, policies, and procedures. Region Cybersecurity Manage Ferrero | France | Hybrid – No longer accepting applications As a Region Cybersecurity Manage, you will define and execute the region’s cybersecurity roadmap aligned with Group strategy, lead security improvement initiatives, and assess regional maturity and risk exposure with key stakeholders. You will align local processes with Group standards, secure industrial sites and supply chains, and drive the deployment of cybersecurity practices and technologies across the region. Secure AI Architect Rezolve Ai | European Union | Remote – No longer accepting applications As a Secure AI Architect, you will assess organizational AI readiness, identify security and governance gaps, and advise both technical and executive stakeholders on the safe and responsible adoption of AI at scale. You will bridge security architecture, compliance, data governance, and responsible AI principles to enable trusted AI deployments. Senior Analyst, Information Security Analog Devices | Ireland | On-site – No longer accepting applications As a Senior Analyst, Information Security, you will manage and automate identity governance and assurance (IGA) processes for provisioning, access requests, and recertifications while improving efficiency through automation and AI. You will enforce least-privilege access through RBAC, maintain IGA documentation and procedures, investigate identity-related incidents and anomalies, and continuously monitor data access to detect risks and maintain audit trails. Senior Application Security Engineer AbbVie | USA | Remote – No longer accepting applications As a Senior Application Security Engineer, you will you will manage AST tools (SAST, DAST, IAST, SCA) to detect code and dependency vulnerabilities across the SDLC and oversee ASPM platforms to centralize findings and embed security into development workflows. You will also support users by resolving false positives, guiding remediation, reviewing exception requests, and integrating security tools into CI/CD pipelines. Senior SOC Analyst/Threat Hunter The Lubrizol Corporation | USA | Hybrid – No longer accepting applications As a Senior SOC Analyst/Threat Hunter, you will nvestigate incidents using response playbooks, document key findings and impacts, and develop improved response procedures. You will automate SOC tasks with Python, PowerShell, and SOAR tools, enhance detection with AI/ML and MITRE ATT&CK–aligned analytics, and conduct structured, hypothesis-driven threat hunts. SIEM Architect NetworkPedia | USA | Hybrid – No longer accepting applications As a SIEM Architect, you will design, implement, and manage highly available SIEM platforms in enterprise environments and maintain security log pipelines for ingestion, normalization, enrichment, and validation. You will build SIEM architectures using technologies such as Cribl, Splunk, Snowflake, and AWS, manage scalable security data lakes for long-term telemetry storage and analytics, and develop detection logic and correlation rules aligned with MITRE ATT&CK frameworks.

The Rise of MCPs in the Enterprise The Model Context Protocol (MCP) is quickly becoming a practical way to push LLMs from “chat” into real work. By providing structured access to applications, APIs, and data, MCP enables prompt-driven AI agents that can retrieve information, take action, and automate end-to-end business workflows across the enterprise. This is already showing up in production through horizontal assistants and custom vertical agents. like Microsoft Copilot, ServiceNow, Zendesk bots, and Salesforce Agentforce, with custom and vertical agents moving fast behind them. This echoes the recent Gartner “Market Guide for Guardian Agents” report, where analysts note that the rapid enterprise adoption of these AI agents is significantly outpacing the maturity of the governance and policy controls required to manage them. We believe the primary disconnect is that these AI “colleagues” don’t look like humans. They don’t join or leave through HR They don’t submit access requests They don’t retire accounts when projects end They’re often invisible to traditional IAM, and that’s how they become identity dark matter: real identity risk outside the governance fabric. And agentic systems don’t just use access, they hunt for the path of least resistance. They’re optimized to finish the job with minimal friction: fewer approvals, fewer prompts, fewer blockers. In identity terms, that means they’ll gravitate toward whatever already works, in-app-local accounts, stale service identities, long-lived tokens, API keys, bypass auth paths, and if it works, it gets reused. Team8’s 2025 CISO Village Survey found: Nearly 70% of enterprises already run AI agents (any system that can answer and act) in production. Another 23% are planning deployments in 2026. Two-thirds are building them in-house. MCP adoption isn’t a question of if; it’s a question of how fast and wisely. It’s already here, and it’s only accelerating. Complicating this further is the reality of hybrid environments. Based on the Gartner research, it seems that organizations face significant hurdles in managing these non-human identities because native platform controls and vendor safeguards generally do not extend beyond their own cloud or platform borders. Without an independent oversight mechanism, cross-cloud agent interactions remain entirely ungoverned. The real question is whether your AI agents become trusted teammates or unmanaged identity dark matter? How Identity Dark Matter Gets Abused by Agent-AI As autonomous AI agents that can plan and execute multi-step tasks with minimal human input, Agent AI is a powerful assistant but also a major cyber risk. Interestingly, leading industry analysts seem to expect that the vast majority of unauthorized agent actions will stem from internal enterprise policy violations, such as misguided AI behavior or information oversharing, rather than malicious external attacks. The typical abuse pattern we see is similar, driven by agent automation and shortcut-seeking: Enumerate what exists: Agent crawls apps and integrations, lists users/tokens, discovers “alternate” auth paths. Try what’s easy first: Local accounts, legacy creds, long-lived tokens, anything that avoids a fresh approval. Lock onto “good enough” access: Even low privilege is enough to pivot: read configuration files, pull logs, discover secrets, map organization structure. Upgrade quietly: Find over-scoped tokens, stale entitlements, or dormant-but-privileged identities and escalate with minimal noise. Operate at machine speed: Thousands of small actions occur across many systems, too fast and too wide for humans to spot early. The real risk here is the scale of impact: one neglected identity becomes a reusable shortcut across the estate. The Dark Matter Risks In addition to abusing identity dark matter, left unchecked, MCP agents (AI Agents that use the MCP protocol to connect to apps, A2A, APIs, and data sources) introduce their own hidden exposures. Orchid uncovers these exposures every day: Over-permissioned access: Agents get “god mode” so they don’t fail, and then that privilege becomes the default operating state. Untracked usage: Agents can execute sensitive workflows through tools where logs are partial, inconsistent, or not correlated back to a sponsor. Static credentials: Hardcoded tokens don’t just “live forever”, they become shared infrastructure across agents, pipelines, and environments. Regulatory blind spots: Auditors ask, “who approved access, who used it, and what data was touched?” Dark matter makes those answers slow, or impossible. Privilege drift: Agents accumulate access over time because removing permissions is scarier than granting them, until an attacker inherits the drift. We believe addressing these blind spots aligns with Gartner’s observation that modern AI governance requires identity and access management to tightly converge with information governance. This ensures organizations can dynamically classify data sensitivity and monitor real-time agent behavior instead of relying solely on static credentials. AI agents aren’t just users without badges. They’re dark matter identities: powerful, invisible, and outside the reach of today’s IAM. And the uncomfortable part: even well-intentioned agents will exploit dark matter. They don’t understand your org chart or your governance intent; they understand what works. If an orphaned account or over-scoped token is the fastest path to completion, it becomes the “efficient” choice. Principles for Safe MCP Adoption To avoid repeating the mistakes of the past (with orphaned or overprivileged accounts, shadow IT, unmanaged keys, and invisible activity), organizations need to adapt and apply core identity principles to AI agents. Gartner introduced the concept of specialized "guardian" systems, supervisory AI solutions that continuously evaluate, monitor, and enforce boundaries on working agents. We recommend organizations follow 5 core principles as they deploy MCP-based agentic solutions. Pair AI Agents with Human Sponsors: Every agent should be tied to an accountable human operator. If the human changes roles or leaves, the agent’s access should change with them. We agree with Gartner on the necessity of ownership mapping, ensuring full lineage from creation to deployment is tracked to both the machine and its human owner. Dynamic, Context-Aware Access: AI agents should not hold standing, permanent privileges. Their entitlements should be time-bound, session-aware, and limited to least privilege. Visibility and Auditability: Gartner has been increasingly calling for organizations to maintain a centralized AI agent catalog that inventories all official, shadow, and third-party agents, alongside comprehensive posture management and tamper-evident audit trails. In our view, every action an AI agent takes should be logged, correlated back to its human sponsor, and made available for review. This ensures accountability and prepares organizations for future compliance scrutiny. Visibility isn’t just “we logged it.” You need to tie actions to data reach: what the agent accessed, what it changed, what it exported, and whether that action touched regulated or sensitive datasets. Otherwise, you can’t distinguish “useful automation” from “silent data movement”. Governance at Enterprise Scale: MCP adoption should extend across both new and legacy systems within a single, consistent governance fabric, so that security, compliance, and infrastructure teams are not working in silos. This is also where Gartner emphasizes the importance of an enterprise-owned supervisory layer, one that ensures consistent controls and reduces the risk of vendor lock-in as MCP adoption expands. Commitment to Good IAM Hygiene: As with all identities, authentication flows, authorization permissions and implemented controls, strong hygiene- on the application server as well as the MCP server- is critical to keep every user within the proper bounds. The Bigger Picture AI agents pose a unique challenge beyond mere integration. They represent a shift in how work is delegated and executed inside enterprises. Left unmanaged, they will follow the same trajectory as other hidden identities: in-app-local accounts, stale service identities, long-lived tokens, API keys, and bypass auth paths that have become identity dark matter over time. And because LLM-driven agents are optimized for efficiency, least friction and fewest steps, they will naturally gravitate to those ungoverned identities as the fastest path to success. If an orphaned local admin or an over-scoped token “just works,” the agent will use it, and reuse it. The opportunity is to get ahead of this curve. By treating AI agents as first-class identities from day one (discoverable, governable, and auditable), organizations can harness their potential without creating blind spots. Enterprises that do this will not only reduce their immediate attack surface but also position themselves for the regulatory and operational expectations that are sure to follow. In practice, most Agent-AI incidents won’t start with a zero-day. They’ll start with an identity shortcut that someone forgot to clean up, then get amplified by automation until it appears to be a systemic breach. The Bottom Line AI agents are here. They are already changing how enterprises operate. The challenge is not whether to use them, but how to govern them. Safe MCP adoption requires applying the same principles that identity practitioners know well, least privilege, lifecycle management, and auditability, to a new class of non-human identities that follow this protocol. If identity dark matter is the sum of what we can’t see or control, then unmanaged AI agents may become its fastest-growing source. The organizations that act now to bring them into the light will be the ones who can move quickly with AI without sacrificing trust, compliance, or security. That’s why Orchid Security is building identity infrastructure to eliminate dark matter, and make Agent AI adoption safe to deploy at enterprise scale.

This week is not about one big event. It shows where things are moving. Network systems, cloud setups, AI tools, and common apps are all being pushed in different ways. Small gaps in access control, exposed keys, and normal features are being used as entry points. The pattern becomes clear only when you see everything together. Faster scans, smarter misuse of trusted services, and steady targeting of high-value sectors. Each story adds context. Reading them all gives a fuller picture of how today’s threat landscape is evolving. ⚡ Threat of the Week Cisco SD-WAN Zero-Day Exploited — A newly disclosed maximum-severity security flaw in Cisco Catalyst SD-WAN Controller (formerly vSmart) and Catalyst SD-WAN Manager (formerly vManage) has come under active exploitation in the wild as part of malicious activity that dates back to 2023. The vulnerability, tracked as CVE-2026-20127 (CVSS score: 10.0), allows an unauthenticated remote attacker to bypass authentication and obtain administrative privileges on an affected system by sending a crafted request. Cisco credited the Australian Signals Directorate's Australian Cyber Security Centre (ASD-ACSC) for reporting the vulnerability. The networking equipment major is tracking the exploitation and subsequent post-compromise activity under the moniker UAT-8616, describing the cluster as a "highly sophisticated cyber threat actor." Control Your AI Agents Before They Control You Airia is the governance and orchestration layer for enterprise AI. Monitor drift, enforce policy, optimize inference cost, and generate audit-ready evidence—so your AI scales securely, compliantly, and profitably. Request a Demo ➝ 🔔 Top News Anthropic Accuses 3 Chinese Firms of Distillation Attacks — Anthropic accused three Chinese AI firms of engaging in concerted "industrial-scale" distillation attack campaigns aimed at extracting information from its model, making it the latest American tech firm to level such claims after OpenAI issued similar complaints. DeepSeek, Moonshot AI, and MiniMax are said to have flooded Claude with large volumes of specially-crafted prompts to elicit responses to train their own proprietary models. Last month, OpenAI submitted an open letter to U.S. legislators, claiming to have observed activity "indicative of ongoing attempts by DeepSeek to distill frontier models of OpenAI and other U.S. frontier labs, including through new, obfuscated methods." The disclosure renewed a debate over training data sources and distillation techniques, with some criticizing the company for training its own systems using copyrighted material without permission. "Anthropic is guilty of stealing training data at a massive scale and has had to pay multibillion-dollar settlements for their theft," xAI CEO Elon Musk said. Google Disrupts UNC2814 GRIDTIDE Campaign — Google disclosed that it worked with industry partners to disrupt the infrastructure of a suspected China-nexus cyber espionage group tracked as UNC2814 that breached at least 53 organizations across 42 countries. The tech giant described UNC2814 as a prolific, elusive actor that has a history of targeting international governments and global telecommunications organizations across Africa, Asia, and the Americas. Central to the hacking group's operations is a novel backdoor dubbed GRIDTIDE that abuses Google Sheets API as a communication channel to disguise C2 traffic and facilitate the transfer of raw data and shell commands. Chinese cyber espionage groups have consistently prioritized the telecommunication sector as a target precisely because of the access their networks provide to sensitive data and lawful intercept infrastructure. Thousands of Public Google Cloud API Keys Exposed with Gemini Access — New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused to authenticate to sensitive Gemini endpoints and access private data. The problem occurs when users enable the Gemini API on a Google Cloud project (i.e., Generative Language API), causing the existing API keys in that project, including those accessible via the website JavaScript code, to gain surreptitious access to Gemini endpoints without any warning or notice. With a valid key, an attacker can access uploaded files, cached data, and even rack up LLM usage charges, Truffle Security said. The issue has since been plugged by Google. UAT-10027 Targets U.S. Education and Healthcare Sectors — A previously undocumented threat activity cluster known as UAT-10027 has been attributed to an ongoing malicious campaign targeting education and healthcare sectors in the U.S. since at least December 2025. The end goal of the attacks is to deliver a never-before-seen backdoor codenamed Dohdoor. "Dohdoor utilizes the DNS-over-HTTPS (DoH) technique for command-and-control (C2) communications and has the ability to download and execute other payload binaries reflectively," Cisco Talos said. Analysis of the campaign has revealed no evidence of data exfiltration to date. Although no final payloads have been observed other than what appears to be the Cobalt Strike Beacon to backdoor into the victim's environment, it's believed that UAT-10027's actions are likely driven by financial gain based on the victimology pattern. Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration — Security vulnerabilities in Anthropic Claude Code could have allowed attackers to remotely execute code on users' machines and steal API keys by injecting malicious configurations into repositories, and then waiting for an unsuspecting developer to clone and open an untrustworthy project. The vulnerabilities were addressed between September 2025 and January 2026. "The ability to execute arbitrary commands through repository-controlled configuration files created severe supply chain risks, where a single malicious commit could compromise any developer working with the affected repository," Check Point said. "The integration of AI into development workflows brings tremendous productivity benefits, but also introduces new attack surfaces that weren't present in traditional tools." ️🔥 Trending CVEs New vulnerabilities surface daily, and attackers move fast. Reviewing and patching early keeps your systems resilient. Here are this week’s most critical flaws to check first — CVE-2025-40538, CVE-2025-40539, CVE-2025-40540, CVE-2025-40541 (SolarWinds Serv-U), CVE-2026-20127, CVE-2026-20122, CVE-2026-20126, CVE-2026-20128 (Cisco Catalyst SD-WAN), CVE-2026-25755 (jsPDF), CVE-2025-12543 (HPE Telco Service Activator), CVE-2026-22719, CVE-2026-22720, CVE-2026-22721 (Broadcom VMware Aria Operations), CVE-2026-3061, CVE-2026-3062, CVE-2026-3063 (Google Chrome), CVE-2025-10010 (CryptoPro Secure Disk for BitLocker), CVE-2025-13942, CVE-2025-13943, CVE-2026-1459 (Zyxel), CVE-2025-71210, CVE-2025-71211 (Trend Micro Apex One), CVE-2026-0542 (ServiceNow AI Platform), CVE-2026-24061 (telnetd), CVE-2026-21902 (Juniper Networks Junos OS), CVE-2025-29631, CVE-2025-1242 (Gardyn Home Kit), CVE-2025-15576 (FreeBSD), CVE-2026-26365 (Akamai), CVE-2026-27739 (Angular), and SVE-2025-50109 (Samsung Tizen OS). 🎥 Cybersecurity Webinars Automating Real-World Security Testing to Prove What Actually Works → This webinar explains why one-time security assessments are no longer enough and shows how organizations can automate continuous, real-world testing of their defenses to uncover gaps and measure how well controls hold up against actual attack techniques. When AI Agents Become Your New Attack Surface → This webinar explains that as AI tools turn into autonomous agents that can browse, call APIs, and access internal systems, the security risk expands beyond the model to the entire environment they operate in, requiring stricter access controls, monitoring, and system-level safeguards rather than model testing alone. Quantum Is Coming: Preparing for the End of Today’s Encryption → This webinar explains how future quantum computers could break today’s encryption, why “harvest now, decrypt later” attacks are a real risk, and what practical steps organizations can take now to begin shifting to post-quantum cryptography. 📰 Around the Cyber World UNC6384 Drops New PlugX Variant — IIJ-SECT and LAB52 have detailed new activity from the Chinese cyber espionage group UNC6384. The attacks follow a known modus operandi of using STATICPLUGIN, a digitally signed downloader, to deliver updated versions of PlugX using DLL side-loading. The malicious payloads are distributed via phishing emails with meeting invitation lures or through fake software updates. OpenAI Takes Action Against ChatGPT Accounts Used for Harmful Purposes — OpenAI said it took down ChatGPT accounts used for influence operations, phishing, and malware development. This included a possible Chinese intelligence operation in which an individual associated with Chinese law enforcement used the AI tool for covert influence operations against domestic and foreign adversaries. The company also acted against clusters conducting reconnaissance about U.S. persons and federal building locations, online romance scams, and Russian influence operations across Africa by generating social media posts and long-form commentary articles. "Unusually, this scam network combined manual ChatGPT prompting and an automated AI chatbot to try to entrap its targets," OpenAI said about the scam operation running out of Cambodia. Some of these scams targeted Indonesian loveseekers. Other scams used ChatGPT to create content that purported to come from fictitious law firms, as well as impersonate real attorneys and U.S. law enforcement as part of a recovery scam targeting fraud victims. AI-Induced Lateral Movement — New research from Orca Security has highlighted how AI can become a "third dimension" in the world of lateral movement, after network and identity, allowing attackers to expand their reach. "By injecting prompt injections in overlooked fields that are fetched by AI agents, hackers can trick LLMs, abuse Agentic tools, and carry out significant security incidents," Orca said. "LLMs don’t truly understand the difference between data and instructions, and when tool output is fed back into the model, it can be interpreted as something to act on. Which opens a window to AI-induced Lateral Movement (AILM) activities." Russia Launches Probe into Telegram CEO — Russian authorities launched a criminal investigation of Telegram founder and CEO Pavel Durov. He is allegedly charged with promoting and facilitating terrorist activity on the messaging platform by failing to respond to law enforcement takedown requests. Russian officials have accused Durov of choosing a "path of violence and permissiveness" by not cooperating with its law enforcement agencies, according to the Rossiyskaya Gazeta. The move comes after Russia began restricting access to Telegram in the country in favor of MAX. Last month, Durov called it an "attempt to force its citizens to switch to a state-controlled app built for surveillance and political censorship." Hacked Prayer App Sends Surrender Messages — According to reports from The Wall Street Journal and WIRED, unidentified hackers seized control of an Iranian prayer app during a joint U.S.-Israeli attack to send messages urging the Iranian military to lay down their weapons and promising amnesty if they surrendered. The messages were sent in the form of push notifications to the BadeSaba Calendar app. It's currently not clear who is behind the hack. The app has been downloaded more than 5 million times from the Google Play Store. Following the U.S.-Israel war on Iran, the government shut down all internet access in the country. Smart TVs Turned Into AI Content Scrapers — Several smart TV app makers are deploying a new SDK named Bright SDK that lets users see fewer ads but also stealthily turns their TV into a node in a global proxy network that crawls and scrapes the web. Bright Data, the company behind the SDK, claims to operate more than 150 million residential proxy IP addresses spanning 195 countries. Multiple Stealer Malware Families Detected — Multiple information stealer families have been detected in the wild. This includes Arkanix, CharlieKirk GRABBER, ComSuon, DarkCloud, MawaStealer, and MioLab (NovaStealer). Kaspersky's analysis of Arkanix has revealed that it was likely developed as an LLM-assisted experiment, shrinking development time and costs. While Arkanix was promoted on underground forums in October 2025, the malware-as-a-service (MaaS) appears to have been taken down towards the end of 2025. The findings demonstrate continued demand for off-the-key stealer malware, creating an ecosystem that enables other threat actors to purchase stealer logs for obtaining initial access to targets. "Raw Infostealer logs are meticulously filtered by corporate domain, packaged, and sold to initial access brokers and attackers specifically looking for frictionless entry points into high-value corporate networks," Hudson Rock said. The development has been complemented by underground networks turning into cybercrime marketplaces, complete with reputation systems, escrow, and specialist vendors, Varonis added. "One operator runs infostealers across thousands of machines. Another extracts and sorts the credentials. A third sells curated access," security researcher Daniel Kelley said. "A fourth deploys the ransomware. Each person focuses on what they do best, and the ecosystem has become ruthlessly efficient." Chilean National Extradited to U.S. to Face Financial Fraud Crimes — Alex Rodrigo Valenzuela Monje (aka VAL4K), a 24-year-old Chilean national, has been extradited to the U.S. over his alleged role in running a cybercrime operation that involved the trafficking of payment card data. The defendant is accused of trafficking stolen credit card numbers and information for over 26,500 credit cards. "From at least May 2021 to August 2023, Valenzuela Monje operated an illegal online card shop, selling dumps of unauthorized access devices through Telegram channels," the U.S. Justice Department said. "He allegedly operated the channels known as MacacoCC Collective and Novato Carding, offering payment card data for virtually all U.S. payment cards." New FUNNULL Infrastructure Discovered — QiAnXin has flagged new infrastructure associated with FUNNULL, a Philippines-based content delivery network (CDN) sanctioned last year by the U.S. Treasury for facilitating cyber scam operations. "Previously, their main method was to poison existing public CDN services; now they have evolved to independently develop complete server-side attack suites (RingH23), actively infiltrating CDN nodes, demonstrating a significant improvement in control and technical sophistication," QiAnXin XLab said. Two independent supply chain infection channels have been identified: the compromise of maccms.la to distribute a malicious PHP backdoor through its update channel, and the compromise of the GoEdge CDN management node to implant an infection module, and deploy the proprietary RingH23 attack suite to all edge nodes via SSH remote commands. The campaign has compromised 10,748 unique IP addresses, predominantly video streaming sites. Spike in Scans for SonicWall Devices — GreyNoise said it detected a spike in scans for SonicWall devices originating from the infrastructure of a known proxy provider. The activity started on February 22, 2026, and scanned for exposed SonicWall SSL VPNs. A total of 84,142 scanning sessions targeting SonicWall SonicOS infrastructure were observed between February 22 and February 25, 2026. The scanning came from 4,305 unique IP addresses across 20 autonomous systems. "Ninety-two percent of sessions probed a single API endpoint to determine whether SSL VPN is enabled — the prerequisite check before credential attacks," GreyNoise said. "A commercial proxy service delivered 32% of campaign volume through 4,102 rotating exit IPs in two surgical bursts totaling 16 hours." Google Removes 115 Android Apps Tied to Ad Fraud — A new ad fraud operation dubbed Genisys involved hijacking Android devices to run malicious activity in the background. The activity leveraged a set of 115 apps that stealthily opened websites inside hidden browser windows to generate ad display revenue for their creators. More than 500 domains were generated using AI tools to serve the ads. "They appear as generic blogs, news-style sites, and informational properties produced at scale, built not to attract real audiences but to receive and monetize fraudulent traffic," Integral Ads said. The apps have since been removed by Google. The findings build on another mobile ad fraud scheme called Arcade in which mobile apps generated hidden in-app browser activity to load websites in the background and convert mobile-origin activity into web traffic. Zerobot Exploits Flaws in n8n and Tenda Routers — A Mirai-based IoT botnet named Zerobot has been observed exploiting vulnerabilities in the n8n AI automation platform (CVE-2025-68613) and Tenda routers (CVE-2025-7544) to expand its reach. The activity was first detected in January 2026. "Targeting of the n8n vulnerability is particularly interesting: Botnets typically exploit Internet of Things (IoT) devices, such as security cameras, DVRs, and routers, but n8n falls into an entirely different category," Akamai said. "Although this isn’t entirely new behavior for botnets, this sort of targeting presents a greater danger to organizations by exposing more critical infrastructure to compromise as the n8n exploit could enable lateral movement for a threat actor." Various ClickFix Campaigns Spotted — Threat hunters disclosed multiple ClickFix campaigns, including one leading to a hands-on-keyboard attack that deployed the Termite ransomware. The attack has been attributed to a group known as Velvet Tempest (DEV-0504). Another ClickFix campaign, codenamed OCRFix, used websites impersonating the Tesseract OCR tool as a launchpad for delivering malware that uses EtherHiding to retrieve the C2 server, send system information, and await further instructions. A third campaign has been found employing fake GitHub repositories impersonating software companies and leveraging ClickFix to social-engineer victims into installing infostealers, such as SHub Stealer v2.0. GTFire Phishing Scheme Detailed — A phishing campaign dubbed GTFire is abusing Google Firebase to host phishing pages and Google Translate to disguise the malicious URLs and bypass email and web security filters. "By chaining these services together, the attackers create phishing links that appear benign, leverage Google’s reputation, and dynamically redirect victims to brand‑impersonating login pages," Group-IB said. "Once credentials are submitted and harvested, victims are often redirected back to the legitimate website of the targeted organization, reducing suspicion and delaying incident response." The campaign is estimated to have harvested thousands of stolen credentials associated with more than a thousand organizations, spanning over a hundred countries and hundreds of industries. The threat actor behind the operation has been active since at least January 1, 2022. Mexico, the U.S., Spain, India, and Argentina are among the prominent targets. C77L Ransomware Targets Russia — A ransomware operation called C77L has been tied to at least 40 attacks on Russian and Belarusian enterprises since March 2025. The group is assessed to be operating out of Iran. Initial access to target networks is accomplished via weak passwords for publicly available RDP and VPN endpoints. "The targets of attacks are Windows systems due to their overwhelming predominance in the IT infrastructures of medium and small businesses," F6 said. RESURGE Malware Can Be Dormant on Infected Ivanti Devices — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) updated its original alert for RESURGE, a piece of malware deployed as part of exploitation activity targeting a now-patched security flaw in Ivanti Connect Secure (ICS) appliances. The agency said "RESURGE has sophisticated network-level evasion and authentication techniques, leveraging advanced cryptographic methods and forged TLS certificates to facilitate covert communications," adding "RESURGE can remain latent on systems until a remote actor attempts to connect to the compromised device." 30 Members of The Com Arrested — A coordinated law enforcement operation led by Europol detained 30 individuals connected to an underground online community known as The Com. The operation, launched in January 2025, has been codenamed Project Compass. An additional 179 members were also identified as part of the investigation. The Com is the name assigned to a loose-knit cybercrime collective that has been linked to online doxxing, harassment, threats of violence, extortion, sexual exploitation, phishing, SIM swapping, ransomware, and other digital crimes. Europol described The Com as a decentralized extremist network. U.K. Government Cuts Cyber Attack Fix Times by 84% — The U.K. government has claimed it has reduced its backlog of critical vulnerabilities by 75% and reduced cyber attack fix times by 87%. Serious security weaknesses in public sector websites are fixed six times faster, cutting the average time from nearly two months to just over a week, the U.K. government said in an update published on 26 February. Poland Dismantles Organized Crime Group — Poland's Central Bureau for Combating Cybercrime (CBZC) dismantled an organized group that used phishing to take control of Facebook accounts and extract BLIK payment codes from victims. Eleven members of an organized criminal group operating in Poland and Germany between May 2022 and May 2024 were identified. Six suspects have been placed in pretrial detention as part of the investigation, and over 100,000 credentials were seized. The group used "phishing techniques to obtain login details for Facebook accounts, and then gained access to them and used instant messaging to extort BLIK codes from other users of the portal," CBZC said. Hacker Exploits Clade to Target Mexican Government Sites — An unknown hacker exploited Anthropic's Claude chatbot to carry out attacks against Mexican government agencies, according to a report by Gambit Security. "Within a month of the initial compromise, ten government bodies and one financial institution were affected, approximately 195 million identities exposed, and roughly 150GB of data exfiltrated: tax records, civil registry files, voter data," the company said. "The attacker even built an automated system that forges official government tax certificates using live data. It was orchestrated by an individual actor directing AI to operate as a nation-state-level team of operators and analysts." The operation ran on more than 1,000 prompts and regularly passed information to OpenAI's GPT-4.1 for analysis. The breach began in late December 2025 and continued for about a month. Anthropic has since disrupted the activity and banned all of the accounts involved. The attacks haven't been attributed to a specific group. 🔧 Cybersecurity Tools Titus → It is an open-source tool from Praetorian that scans code, files, repositories, and traffic to find leaked credentials like API keys and tokens. It uses hundreds of pattern rules and can check whether a detected secret is actually active. You can run it as a command-line tool, use it inside other tools as a Go library, or use it as extensions in Burp Suite or a browser to uncover credential leaks in different workflows. Sirius → It is an open-source vulnerability scanning platform on GitHub that automates network and system security checks to find weaknesses and risks in infrastructure. It combines community-driven security data with automated tests, runs within containers, and gives operators a unified view of vulnerabilities to prioritize remediation. Disclaimer: These tools are provided for research and educational use only. They are not security-audited and may cause harm if misused. Review the code, test in controlled environments, and comply with all applicable laws and policies. Conclusion Viewed one by one, these incidents seem contained. Seen together, they show how risk now flows across connected systems that organizations rely on daily. Infrastructure, AI platforms, cloud services, and third-party tools are deeply intertwined, and strain in one area often exposes another. The takeaway is clarity, not alarm. Adversaries are improving efficiency, scaling access, and operating inside normal processes. Reading through each report helps map that shift and understand how the broader environment is changing.

Vulnerabilità in prodotti ServiceNow Alert AL02/260227/CSIRT-ITA Sintesi Rilevata una vulnerabilità di sicurezza con gravità “critica” in ServiceNow AI Platform. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati. Tipologia Remote Code Execution Prodotti e/o versioni affette ServiceNow AI Platform Xanadu, versioni precedenti al Patch 11 Hotfix 1a Yokohama, versioni precedenti al Patch 12 (esclusa Patch 10 Hotfix 1b) Zurich, versioni precedenti al Patch 5 (esclusa Patch 4 Hotfix 3b) Azioni di mitigazione In linea con le dichiarazioni del vendor, si raccomanda di aggiornare i prodotti vulnerabili seguendo le indicazioni del bollettino di sicurezza riportato nella sezione Riferimenti.

Veza expands platform with AI Access Agents for enterprise identity governance Veza expanded its platform with Veza Access Agents, a set of purpose-built AI agents designed to automate complex identity and access governance tasks for enterprises. Veza also announced advancements to its AI Agent Security product, providing organizations with deeper visibility into agent risks and greater control over third-party AI agents, large language models (LLMs), AI apps, and AI infrastructure (MCP). As enterprises adopt agentic AI to drive business efficiency, the volume and complexity of identity-based access have reached a tipping point. “Identity is a foundational element in security, especially in the era of autonomous AI. We are on the cusp of having trillions of AI agents. And we believe that identity Security for AI Agents is an unsolved problem,” said Tarun Thakur, CEO of Veza. “Veza’s Access Graph harnesses the power of identity and permissions data across enterprise systems, to help organizations understand who and what can access what data. This enables enterprises to visualize, govern, and manage access across humans, non-human identities, and AI agents to data. With the introduction of Veza Access Agents, we are shifting the burden of access security and access governance tasks from a manual effort to intelligent, automated reasoning – this lays the foundation to enforce deterministic policies for agents at machine speed towards our vision of Veza as the Enterprise Agent Identity Control Plane,” Thakur continued. Introducing Veza Access Agents Veza Access Agents leverage the power of the Veza Access Graph to enable an interactive experience for IAM teams, agentic AI programs, and identity security use cases. Built on AWS Bedrock for enterprise-grade compliance controls, Veza intelligently chooses the optimal model (Claude, Opus, Sonnet) for each task, whether you need quick responses or deeper reasoning, without compromising quality or correctness. The first set of Veza Access Agents, currently available as early access, include: Veza Prompt Agent: A conversational, natural language interface that quickly surfaces insights and answers complex queries easily allowing customers to understand enterprise risks of agents, machines, and human identities. Veza Access Search Agent: Enables simple natural language queries to visualize permission relationships for all identities and their entitlements. Veza Access Review Agent: Helps customers to focus on high-risk access review items and eliminates reviewer fatigue through an accurate, context-based, AI-assisted reasoning and decision process. Solving identity access for AI agents Veza has deepened its capabilities for securing external AI agents and infrastructure, such as the OpenAI Agent Platform, Claude Code, and MCP servers. These improvements help organizations close the “identity blind spots” created by semi-autonomous AI entities. According to Gartner, “Through 2028, over 50% of AI initiatives will halt, becoming unmanageable, because of unresolved agentic identity challenges.” Key enhancements to Veza AI Agent Security include: Expanded discovery of tools: Veza has extended its visibility beyond just discovering MCP (Model Context Protocol) servers to now identifying the granular tools such as Jira MCP server calls and the actions an agent is authorized to invoke within a connected application. This includes visualizing the end-to-end path from the agent to the specific data resources and APIs being accessed. Suggested owner agent: To combat “shadow AI,” Veza is introducing the Suggested Owner Agent, which automatically maps AI agents and service accounts to their human owners. This enables decentralized risk remediation and more accurate user access reviews by establishing clear accountability. AI blast radius visualization: Using the industry-first Access Graph, Veza is the identity authorization solution capable of quantifying the exact action-level blast radius for every AI agent, including the sensitive data and system resources impacted. AI security posture management (AISPM): Veza provides continuous assessment of AI infrastructure and identities, identifying misconfigurations and over-privileged bots. With this release, AISPM now maps identity risks to the NIST AI Risk Management Framework (AIRMF) enabling proactive remediation and compliance across the AI stack. AI Agent Security dashboard: Enterprises can now leverage Veza’s out-of-the-box dashboards to centralize the AI identity landscape, shifting from passive alerts to active remediation. Veza tracks agent sprawl, dormant identities, and access drift, allowing teams to trigger automated workflows directly in ServiceNow or Jira.

As the cybersecurity market continues to mature, SecurityWeek’s annual M&A report provides an essential roadmap for understanding how corporate consolidation is reshaping the digital defense sector. SecurityWeek’s M&A tracker cataloged 426 deals in 2025, including 334 involving pure-play companies. The 2025 figure of 426 represents a 5% increase over 2024, signaling that the sector is once again on an upward trajectory after two years of consecutive decline. While the total number of deals is lower than the 2022 peak (455), the value and complexity of the deals appear to be higher. In addition, the market continues to move away from the ‘buying everything’ trend observed in 2021/2022 to a more strategic, international consolidation. Regional dynamics and global footprint The 2025 data shows that the market has become significantly more globalized. At 288 participations for 426 deals, the US remains involved in roughly 67% of all global cybersecurity M&A. This is a slight recovery from the 63% low in 2023, but still well below the 80% dominance seen in 2021. The UK saw a decline from 70 deals (2021) to 48 (2023). However, it rebounded to 67 in 2024 and maintained that momentum with 64 deals in 2025. The UK has solidified its position as the clear #2 global hub for cybersecurity M&A. After being overtaken in the rankings in 2024, Israel has reclaimed the 3rd position with 34 deals in 2025. Ireland and Sweden saw fewer than 10 deals in 2024 after a strong 2023. In 2025, they bounced back to 12 and 11 deals respectively. Capital allocation and valuation trends Financial details were disclosed for 74 deals for a total disclosed value of $92.5 billion. This includes 63 deals involving pure-play cybersecurity companies, with a total disclosed value of $84 billion. The total disclosed deal value has surged by approximately 82% year-over-year, which can largely be attributed to Google’s planned acquisition of cloud security giant Wiz for $32 billion. The industry has sustained its appetite for billion-dollar acquisitions, with 11 deals exceeding the $1 billion mark. In addition to Google-Wiz, seven deals involving pure-play cybersecurity firms surpassed $1 billion, including Palo Alto Networks acquiring CyberArk ($25B) and Chronosphere ($3.3B), ServiceNow’s acquisition of Armis ($7.7B) and Veza ($1B), Francisco Partners buying Jamf ($2.2B), Veeam Software acquiring Securiti AI ($1.7B), and Proofpoint acquiring Hornetsecurity ($1.8B). This suggests that large-scale platform consolidation is now a permanent fixture of the landscape. The $100M-$999M range was the primary engine of growth in 2025. This indicates that acquirers are focusing on mature, established cybersecurity companies rather than early-stage startups. This also suggests that the industry is currently in a phase of strategic scaling, where medium-sized specialized leaders are being swallowed by larger platforms to create all-in-one security suites. There has been a noticeable decline in the number of disclosed deals under $100M (down to 26 in 2025 from 32 in 2024). This implies that ‘tuck-in’ acquisitions of very small startups are either becoming less frequent or are less likely to have their financial terms disclosed compared to larger, more impactful deals. Sector deep-dive and domain expertise SecurityWeek data shows that 125 deals involved managed security solutions providers (MSSPs) in 2025, including 60 pure cybersecurity providers. This includes product distributors and companies that offer other products and services in addition to cybersecurity. While activity involving MSSPs has increased from 119 deals in 2024, it remains significantly lower than the 150+ seen in 2022 and 2023. After a sharp drop in 2024, the 2025 figure suggests the market has found its new normal. It is no longer in a freefall, but it hasn’t returned to the frantic buying spree of 2022-2023. The strategic value remains high as managed services continue to be the primary way small-to-medium enterprises consume security. While it’s important to keep track of MSSP deals, we are tracking them separately in an effort to get a better view of the other categories. Several core security sub-sectors experienced significant upward momentum in 2025, as acquirers seem to prioritize data sovereignty, identity integrity, and regulatory compliance. With 82 deals, GRC (governance, risk, and compliance) reached a five-year peak in 2025. While it has always been a top category (averaging 65 deals from 2021-2024), the jump to 82 suggests that companies are prioritizing regulatory requirements over purely technical defenses. Data protection recorded aggressive growth, surging from 44 deals in 2024 to 63 deals in 2025. This reflects an industry shift toward data-centric security. While still a smaller category, AI security is showing a clear upward trajectory. It recorded 8 deals in 2024 and has increased to 13 deals in 2025, mirroring the broader tech industry’s focus on securing LLMs and AI pipelines. After a significant slump in 2024 (dropping to 28 deals), identity has bounced back to 43 deals in 2025, returning to its historical levels from 2022 and 2023. While several sectors saw record growth, four categories experienced a cooling in M&A activity, reflecting a pivot away from reactive tools toward long-term governance and data resilience. One of them is incident response, which has seen a notable decline, dropping from a peak of 38 deals in 2024 to 25 deals in 2025. Private equity-led acquisitions have also cooled significantly. They spiked to 37 in 2023 but dropped to 18 in 2025, returning to the levels seen in 2021 and 2022. After a strong 2024 (16 deals), interest in companies specializing in industrial/OT cybersecurity appears to have leveled off, dropping back to 9 deals, the same number recorded in 2023. Application security saw a steady rise in M&A deals through 2024 (reaching 31), but dipped slightly to 26 in 2025. Two types of companies stand out for remaining steady throughout the years. Network security remains the most consistent category in the dataset. It has hovered almost exactly at the same level for four years, with roughly 40 deals announced every year between 2022 and 2025. The government contractors segment is also remarkably stable, consistently recording between 36 and 38 deals annually (except for a slight outlier of 43 in 2021). It sits at 36 deals for 2025. The 2025 data indicates a market shift away from reactive tools (incident response) and toward resilience and compliance infrastructure (GRC and data protection). While 2024 was a year of diversifying into specialized niches, 2025 appears to be a year of consolidation around the core pillars of governance and data privacy. Monthly summaries of 2025 cybersecurity M&A deals: January, February, March, April, May, June, July, August, September, October, November, December. Methodology: The data was collected through news distribution services, Google searches and pitches from PR companies. The data includes companies that issued press releases announcing or mentioning acquisitions, as well as deals that have been privately reported to SecurityWeek. All deals that had a cybersecurity component have been taken into account for this study. Mergers and acquisitions that did not have an English-language announcement may not be included. The data could also include some deals that may have not been completed after they were announced. The GRC category includes governance, compliance, risk management, audit, assessment, vulnerability management, penetration testing, attack surface management, offensive security, and cyber insurance. Network security includes endpoint security, MDR, XDR, NDR, and SASE. Identity includes IAM, PAM, secure access, authentication, and authorization. Incident response includes SOAR, SIEM, SOC, and forensics. ‘Other (specialized)’ includes hardware, quantum, media and events, healthcare, brand protection, financial, online safety, SAP, recruiting, real estate, and automotive. Data protection includes encryption/cryptography, VPN, privacy, backup and blockchain. MSSP includes cybersecurity solution distributors and companies that do not develop their own products or solutions. The AI category only includes companies specializing in securing AI.

Betti RHC, la prima graphic novel al mondo dedicata alla cybersecurity awareness, ha finalmente il suo sito ufficiale. Uno spazio tutto suo dove scoprire il progetto, sfogliare le copertine degli episodi e immergersi nel mondo di Betti: la giovane laureanda in informatica che, dopo la morte misteriosa del padre, si trasforma nell'hacker più potente del mondo. Una storia avvincente che, episodio dopo episodio, affronta una minaccia digitale diversa — dal phishing al ransomware, fino al cyberbullismo — e insegna a riconoscerla e a difendersi, senza che sembri mai una lezione. Sul sito trovate tutto ciò che rende Betti un progetto diverso dal solito: la sua filosofia, le anteprime delle tavole e il racconto di come nasce ogni volume. Perché dietro Betti RHC c'è solo lavoro umano: ogni tavola è disegnata interamente a mano dagli artisti del Gruppo Arte di Red Hot Cyber, senza alcun uso di intelligenza artificiale. E a garantire che ogni storia sia realistica e tecnicamente corretta c'è la supervisione degli hacker etici del gruppo HackerHood, che mantengono il racconto fedele al mondo reale della sicurezza informatica. C'è spazio anche per le aziende, che possono usare Betti come strumento di awareness diverso dai soliti corsi: acquistare i volumi, personalizzarli con il proprio brand o sponsorizzare nuovi episodi. E come primo regalo, l'episodio "Byte the Silence", dedicato al cyberbullismo, è scaricabile gratuitamente per uso personale. Perché la miglior difesa, in fondo, è una bella storia. 👉 Scopri tutto su https://betti.redhotcyber.com/

ServiceNow has disclosed details of a now-patched critical security flaw impacting its ServiceNow artificial intelligence (AI) Platform that could enable an unauthenticated user to impersonate another user and perform arbitrary actions as that user. The vulnerability, tracked as CVE-2025-12420, carries a CVSS score of 9.3 out of 10.0. It has been codenamed BodySnatcher by AppOmni. "This issue [...] could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform," the company said in an advisory released Monday. The shortcoming was addressed by ServiceNow on October 30, 2025, by deploying a security update to the majority of hosted instances, with the company also sharing the patches with ServiceNow partners and self-hosted customers. The following versions include a fix for CVE-2025-12420 - Now Assist AI Agents (sn_aia) - 5.1.18 or later and 5.2.19 or later Virtual Agent API (sn_va_as_service) - 3.15.2 or later and 4.0.4 or later ServiceNow credited Aaron Costello, chief of SaaS Security Research at AppOmni, with discovering and reporting the flaw in October 2025. While there is no evidence that the vulnerability has been exploited in the wild, users are advised to apply an appropriate security update as soon as possible to mitigate potential threats. "BodySnatcher is the most severe AI-driven vulnerability uncovered to date: Attackers could have effectively 'remote controlled' an organization's AI, weaponizing the very tools meant to simplify the enterprise," Costello told The Hacker News. In a separate report, AppOmni said the Virtual Agent integration flaw allows unauthenticated attackers to impersonate any ServiceNow user using only an email address, bypassing multi-factor authentication (MFA) and single sign-on (SSO) protections. Successful exploitation could allow a threat actor to impersonate an administrator and execute an AI agent to subvert security controls and create backdoor accounts with elevated privileges. "By chaining a hardcoded, platform-wide secret with account-linking logic that trusts a simple email address, an attacker can bypass multi-factor authentication (MFA), single sign-on (SSO), and other access controls," Costello added. "And it’s the most severe AI-driven security vulnerability uncovered to date. With these weaknesses linked together, the attacker can remotely drive privileged agentic workflows as any user." The disclosure comes nearly two months after AppOmni revealed that malicious actors can exploit default configurations in ServiceNow's Now Assist generative AI platform and leverage its agentic capabilities to conduct second-order prompt injection attacks. The issue could then be weaponized to execute unauthorized actions, enabling attackers to copy and exfiltrate sensitive corporate data, modify records, and escalate privileges.

Vulnerabilità in prodotti ServiceNow Alert AL01/260113/CSIRT-ITA Sintesi Rilevata una vulnerabilità di sicurezza in ServiceNow AI Platform. Tale vulnerabilità potrebbe consentire a un utente malintenzionato di elevare i propri privilegi sui sistemi interessati. Tipologia Privilege Escalation Prodotti e/o versioni affette ServiceNow Now Assist AI Agents (sn_aia) 5.1.x, versioni precedenti alla 5.1.18 Now Assist AI Agents (sn_aia) 5.2.x, versioni precedenti alla 5.2.19 Virtual Agent API (sn_va_as_service) 3.x, versioni precedenti alla 3.15.2 Virtual Agent API (sn_va_as_service) 4.x, versioni precedenti alla 4.0.4 Azioni di mitigazione In linea con le dichiarazioni del vendor, si raccomanda di aggiornare i prodotti vulnerabili seguendo le indicazioni del bollettino di sicurezza riportato nella sezione Riferimenti.

Betti RHC, la prima graphic novel al mondo dedicata alla cybersecurity awareness, ha finalmente il suo sito ufficiale. Uno spazio tutto suo dove scoprire il progetto, sfogliare le copertine degli episodi e immergersi nel mondo di Betti: la giovane laureanda in informatica che, dopo la morte misteriosa del padre, si trasforma nell'hacker più potente del mondo. Una storia avvincente che, episodio dopo episodio, affronta una minaccia digitale diversa — dal phishing al ransomware, fino al cyberbullismo — e insegna a riconoscerla e a difendersi, senza che sembri mai una lezione. Sul sito trovate tutto ciò che rende Betti un progetto diverso dal solito: la sua filosofia, le anteprime delle tavole e il racconto di come nasce ogni volume. Perché dietro Betti RHC c'è solo lavoro umano: ogni tavola è disegnata interamente a mano dagli artisti del Gruppo Arte di Red Hot Cyber, senza alcun uso di intelligenza artificiale. E a garantire che ogni storia sia realistica e tecnicamente corretta c'è la supervisione degli hacker etici del gruppo HackerHood, che mantengono il racconto fedele al mondo reale della sicurezza informatica. C'è spazio anche per le aziende, che possono usare Betti come strumento di awareness diverso dai soliti corsi: acquistare i volumi, personalizzarli con il proprio brand o sponsorizzare nuovi episodi. E come primo regalo, l'episodio "Byte the Silence", dedicato al cyberbullismo, è scaricabile gratuitamente per uso personale. Perché la miglior difesa, in fondo, è una bella storia. 👉 Scopri tutto su https://betti.redhotcyber.com/

Thirty cybersecurity-related merger and acquisition (M&A) deals were announced in December 2025. SecurityWeek has cataloged more than 420 M&A deals in 2025. A detailed report will be published in the coming weeks. Eight acquisitions involving pure-play cybersecurity firms exceeded $1 billion. Here are some of the most important cybersecurity M&A deals announced in December 2025: Cloud and security company Akamai has acquired serverless cloud provider Fermyon. Fermyon’s WebAssembly (Wasm) function-as-a-service is being combined with Akamai’s platform to enable enterprises to build edge-native applications with better performance and lower costs. Akamai also plans to deepen the integration between the edge functions platform and its performance and security products. Application security firm Checkmarx has acquired Tromzo, a company specializing in AI-native autonomous security agents. Tromzo’s technology and engineering team will enhance the Checkmarx One platform and expand Checkmarx Assist AI agents. Tromzo founders and employees will join Checkmarx’s product and engineering organization. Integrity360 acquires Cresco and Redshift Integrity360, an Ireland-based cybersecurity firm with a presence in Europe and Africa, announced two acquisitions in December. It bought South Africa-based Redshift, which specializes in penetration testing, to strengthen its presence in South Africa and expand its SOC capabilities. It also announced buying Cresco, a cybersecurity services consultancy that serves organizations in Belgium and Luxembourg. Swedish exposure management and identity security firm Outpost24 announced the acquisition of Infinipoint, a company providing device identity, posture validation, and secure workforce access solutions. The deal marks Outpost24’s entry into the zero trust workforce access market, and enables the company to enhance its identity security capabilities. Red Hat has acquired AI security and safety company Chatterbox Labs. Red Hat said the acquisition enables it to add safety testing and guardrails to its AI. Red Hat’s MLOps capabilities will be combined with Chatterbox’s guardrail capabilities. ServiceNow to acquire Armis and Veza ServiceNow is acquiring Armis, a company specializing in solutions for discovering IT, OT, and IoT assets, in a $7.75 billion cash deal. ServiceNow is also buying identity security firm Veza, reportedly for $1 billion. The goal is to extend the capabilities of its security and risk portfolios. Threat intelligence company Silent Push has acquired HYAS, a Canada-based firm specializing in proactive threat intelligence and protective DNS solutions. The deal enables Silent Push to enhance its capabilities and expand its customer base. HYAS leadership and employees will join Silent Push, and the company will operate under the Silent Push brand. Other cybersecurity M&A deals announced in December 2025: Related: Cybersecurity M&A Roundup: 30 Deals Announced in November 2025 Related: Cybersecurity M&A Roundup: 45 Deals Announced in October 2025

ServiceNow to acquire cyber firm Armis in $7.75 billion deal The cybersecurity firm Armis is being acquired for $7.75 billion by software giant ServiceNow. ServiceNow announced the deal on Tuesday, explaining the acquisition will expand its security offerings and help it to advance “AI-native, proactive cybersecurity and vulnerability response.” Founded by Israeli military veterans in 2015, Armis started out as an IoT and operational technology security company before expanding to cyber exposure management. Armis co-founder Yevgeny Dibrov said Armis was created to protect critical environments and offer real-time intelligence to the public and private sector. The company recently surpassed $340 million in annual recurring revenue and has about 950 employees. ServiceNow plans to fund the deal, which will close in the second half of 2026, through cash and debt. The deal has been rumored for weeks as the enterprise workflow company seeks to keep up with rivals that are making similar purchases of cybersecurity firms this year. Google purchased Israeli cybersecurity firm Wiz for $32 billion and Palo Alto Networks bought CyberArk Software for $25 billion. ServiceNow has dominated the market for management and automation software, reporting $3.4 billion in revenue last quarter. The company has announced several acquisitions in recent months, including AI company Moveworks and several others. Earlier this month, it agreed to a $1 billion acquisition of identity security platform Veza. Jonathan Greig is a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic.

ServiceNow has announced a $7.8bn deal to acquire security startup Armis at the end of what has been a big year for cybersecurity merger and acquisition (M&A) activity. Best known for its IT service and operations management and security operations (SecOps) offerings, ServiceNow said the acquisition would “extend and enhance” its security, risk, and OT portfolios. The firm claimed the deal will “more than triple” its market opportunity for security and risk solutions. The two firms have been longtime partners, with Armis data powering ServiceNow’s automated workflows for joint customers. Armis is best known for its OT and IoT security expertise, which enables customers to manage cyber-risk exposure across often poorly protected assets. ServiceNow claimed the combination of this with its workflow automation expertise would help prospective customers in sectors like manufacturing and healthcare to proactively close security gaps. The AI Angle ServiceNow was also keen to emphasize the importance of Armis data and insights to its AI Control Tower platform, which unifies AI management and governance across the enterprise. The tie-up will help organizations more effectively defend against AI-powered attacks by providing insight into where they’re exposed and automated remediation at scale to continuously reduce risk, the firm claimed. “In the agentic AI era, intelligent trust and governance that span any cloud, any asset, any AI system, and any device are non-negotiable if companies want to scale AI for the long-term,” said ServiceNow president, Amit Zavery. “Together with Armis, we will deliver an industry-defining strategic cybersecurity shield for real-time, end-to-end proactive protection across all technology estates. Modern cyber risk doesn’t stay neatly confined to a single silo, and with security built into the ServiceNow AI Platform, neither will we.” However, the key to a successful acquisition, as always, will be how well the two firms integrate their offerings – particularly Armis’ data and ServiceNow’s popular configuration management database (CMDB) product. “In the era of AI and agents, the benefits and value will be enormous, but so is the complexity,” said Larry Feinsmith, head of global tech strategy, innovation & partnerships at JPMorgan Chase. “The combination of ServiceNow and Armis provides a dynamic picture of an enterprise’s connected technology assets and an AI and agentic-powered blueprint to secure and enable trusted AI.” M&A activity rebounded sharply in 2025, with the value of deals beating those of 2024 by more than 10% and coming close to exceeding the record set in 2021, of around $75bn. The acquisition is an all-cash deal expected to close in the second half of 2026. Image credit: bluestork / Shutterstock.com