Follow the latest coverage, related explainers and connected technology stories.
Microsoft detected a campaign involving more than one million emails impersonating CEOs and ServiceNow to persuade accounts payable teams to transfer approximately $50,000 via ACH. The company says the campaign used third-party sending infrastructure and content showing indicators of development with AI assistance, with no evidence that the impersonated organizations were compromised.
ServiceNow fixed three maximum-severity security vulnerabilities in AI Platform that could be exploited to execute code, inject SQL, and escalate privileges without authentication or user interaction. The company is urging customers with self-hosted instances to update quickly, while confirming that it has not observed malicious exploitation of these vulnerabilities so far.