CVE-2026-6875: A Pre-Auth Sandbox Escape in ServiceNow, Exploited Five Days After Disclosure
A critical code injection flaw in the ServiceNow AI Platform lets unauthenticated attackers escape the script sandbox and execute code on the instance...
patch-management
3 articles on patch-management — privacy laws, security frameworks, and regulatory compliance.
622 CVEs and a Three-Day Federal Deadline: Microsoft's Record July 2026 Patch Tuesday Is a Compliance Event, Not Just a Patching One
On July 14, 2026, Microsoft shipped the largest Patch Tuesday in history — 569 to 622 CVEs depending on who is counting — including actively exploited...
Comcast's $117.5 Million Xfinity Settlement: The Cost of a Vulnerability Left Open
Comcast agreed to pay $117.5 million to resolve claims from the October 2023 Xfinity breach that exposed the data of more than 30 million customers. T...