servicenow2 articles
ServiceNow RCE Flaw Exploited Within Days of Patch — But Who's Actually Behind It?
A critical remote code execution vulnerability in ServiceNow (CVE-2026-6875) is reportedly being exploited in the wild just days after patches were released on July 14 and technical details were publicly disclosed. Threat intelligence firm Defused observed exploitation activity on July 18, though closer analysis revealed the payload was identical to a published proof-of-concept rather than an independently developed exploit. ServiceNow states it has found no evidence of compromise on its hosted instances, and there is speculation the activity may originate from security researchers rather than malicious threat actors.
Okta Wants to Be the One That Pulls the Plug on Your Rogue AI Agents
Okta is positioning itself as a key provider of identity and security controls for AI agents, responding to enterprise demand for "kill switch" capabilities that can shut down rogue or policy-violating agents. CEO Todd McKinnon highlighted that while 92% of executives report widespread AI agent use, only 22% have proper identity controls in place, creating significant security gaps. Okta's solution involves maintaining a directory of agents, setting access policies, and severing authorization tokens when agents go rogue — a capability already attracting major partners including ServiceNow, Salesforce, and AWS.