One Attacker Scrapes Salesforce and ServiceNow Portals Since 2025
A single threat actor has been systematically scraping data from Salesforce and ServiceNow customer portals for over a year, according to research…
Tag: ServiceNow
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More Stories
This week's ThreatsDay Bulletin covers a wide range of cybersecurity developments, including new attack techniques, data breaches, and product updates. Key highlights…
ServiceNow Service Portal: Self-Service Portal
ServiceNow Service Portal provides a self-service interface for users. Its search endpoint (POST /api/now/sp/search) can be abused to scrape data if guest…
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
Threat actors are actively exploiting a critical security flaw in the ServiceNow AI Platform, identified as CVE-2026-6875, which carries a CVSS score…
CVE-2026-6875: ServiceNow AI Platform Sandbox Escape Vulnerability
CVE-2026-6875 is a critical sandbox escape vulnerability in ServiceNow AI Platform with a CVSS score of 9.5. It allows unauthenticated attackers to…
Identity Lifecycle Management Fails for AI Agents: Governance Gaps and Fixes
Identity lifecycle management (ILM) was architected around human principals with employment records, managers, and departure dates. AI agents have none of these,…
ServiceNow: Enterprise Service Management Platform
ServiceNow provides enterprise service management solutions, including IT service management and customer service portals. Its Service Portal search endpoint has been exploited…