Stealthy City-Forum attacks use a custom toolset to exploit guest access and extract exposed data from Salesforce and ServiceNow environments.

ServiceNow says security researchers were behind activity linked to a newly patched authentication flaw, but the company continues to investigate potential exposure. ServiceNow is notifying customers ...

An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. The data-theft campaign, dubbed ...

Threat actors are chaining together ServiceNow flaws using publicly available exploits to breach government agencies and private firms in data theft attacks. This malicious activity was reported by ...

ServiceNow CVE-2026-6875, a critical unauthenticated RCE in the AI Platform, is under active exploitation. Threat intelligence firm Defused confirmed a second sandbox-escape gadget chain that bypasses ...

Cloud technology giant ServiceNow appears to have notified some of its enterprise customers that a software bug on its platform was allowing anyone on the internet to access their data. A knowledge ...