DanSec

Vendor

ServiceNow

In 15 briefs, most recently 1 September 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

2 ServiceNow vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:

Coverage in DanSec Daily

  1. Berlin city data theft by Rhysida, McKesson breach claimed by ShinyHunters, and Cronos restart after $74M Tectonic exploit.
  2. McKesson breach claimed by ShinyHunters (284M records), Berlin city ransomware by Rhysida, and ServiceNow critical code injection patches.
  3. Hasbro breach, ATF ransomware incident and Hugging Face takeover by rogue AI agents lead; also ServiceNow and PaperCut flaws.
  4. The CareCloud breach growing to 3.7M people, Medusa ransomware hitting 500+ US critical infrastructure orgs, and Clop's attack on PTC Windchill servers.
  5. Ceva Logistics warehouse cyberattack, LiteLLM supply chain breach hitting 2,500+ orgs, and Lazarus Group Windows zero-day exploit.
  6. Hugging Face breach by an autonomous AI agent, Estée Lauder and EY data breaches, and actively exploited ServiceNow and SonicWall zero-days.
  7. Dutch and Spanish police bust major fraud rings; Firefox, Zoom, SharePoint and LegacyHive Windows zero-day flaws. Plus OkoBot and AsyncAPI npm supply chain …
  8. Microsoft GitHub repos hijacked in Miasma worm supply chain attack, ServiceNow API breach, Russia-aligned WinRAR espionage, record 206 Patch Tuesday fixes.
  9. Central Maine Healthcare and Endesa breaches, Microsoft's January 2026 Patch Tuesday zero-days, and GoBruteforcer botnet hitting crypto projects.
  10. Jaguar Land Rover's cyberattack fallout, Sedgwick Government Solutions breach, and malicious Chrome extensions stealing ChatGPT and DeepSeek chats from 900,000 …
  11. The French postal service cyberattack, the Nissan and Red Hat GitLab data exposure, and the Baker University breach affecting 53,000 people.
  12. Inotiv ransomware theft, Marquis breach affecting 780,000+, and React2Shell (CVE-2025-55182) exploitation by China-linked actors.
  13. ASUS router botnet Operation WrtHug, Cloudflare's six-hour outage, and Fortinet FortiWeb zero-days.
  14. UK arrests over Scattered Spider attacks on M&S, Co-op and Harrods; Qantas breach hits 5.7M customers; Citrix NetScaler CVE-2025-5777 added to KEV.
  15. The Qantas breach (5.7M customers), Ingram Micro's SafePay ransomware attack, and McDonald's Paradox.ai hiring platform exposure.