ServiceNow launches AI security tools amid cloud exposure reports

ServiceNow has introduced six integrated solutions designed to advance its vision of autonomous security through an AI Control Tower. These tools address key areas of AI-native cyber defense, including exposure management, continuous vulnerability detection, cyber-physical system security, identity and access security, agent-based incident response, and cyber risk and compliance management. The goal is to enable companies to mitigate risks at machine speed before they escalate into security incidents.

Separately, cybersecurity reports indicate that portals belonging to Salesforce and ServiceNow were exposed to unauthorized access for 17 months as part of a campaign known as ‘City-Forum’ (also referred to as the ‘Reco’ campaign). This incident highlights the risks associated with the configuration of complex cloud-based enterprise portals.

In related security news, a zero-day vulnerability was identified in the data analysis platform Metabase, which was actively exploited to access customer data, including names, email addresses, and IP addresses. Additionally, Microsoft has recently issued patches to address ongoing security challenges.