A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months
2026-08-12T14:51:40Z•07d17cf5a639f21ca3c6bbb25cabbc3c08b194150e3d63b8fe58b1ffd63ab95c
CVE-2026-68820AI-governanceChromeLazarusMicrosoft 365Microsoft Patch TuesdayNorth KoreaOT-securityOperation Dream JobSalesforceServiceNowSignalWindowsautomatic-key-verificationdata-exposurefake-job-lureguest-user-exposurepenetration-testingphishingprivilege escalationzero-day
What happened
Security news digest covering a suspected 17-month campaign abusing guest access to Salesforce and ServiceNow portals, Signal automatic key verification, enterprise AI governance and secure deployment, Lazarus fake-job attacks using trojanized software and a Windows zero-day, Microsoft’s August 2026 fixes including actively exploited CVE-2026-68820, and new defensive capabilities for Microsoft 365, penetration testing, OT monitoring, and abusive Chrome notifications.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 07d17cf5a639f21ca3c6bbb25cabbc3c08b194150e3d63b8fe58b1ffd63ab95c
- Enrichment time
- 2026-08-12T14:51:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.