CVE-2026-6875: A Pre-Auth Sandbox Escape in ServiceNow, Exploited Five Days After Disclosure
A critical code injection flaw in the ServiceNow AI Platform lets unauthenticated attackers escape the script sandbox and execute code on the instance...
saas-security
3 articles on saas-security — privacy laws, security frameworks, and regulatory compliance.
Nintendo, TinyPulse, and the $2M Ransom: How a Third-Party HR Survey Vendor Became a 2026 Extortion-as-a-Service Case Study
An extortion group calling itself Shadowbyt3$ stole roughly 859 MB of Nintendo of America employee data — including W-9 tax forms and bank statement P...
The Q2 2026 Ransomware Wave: Qilin, ShinyHunters, and the Compliance Failures Behind the Salesforce Extortion Campaign
May 2026 saw 95 publicly disclosed ransomware attacks across 17 countries, with Qilin and ShinyHunters leading a campaign that increasingly skips encr...