ServiceNow gives AI agents a passport, and limits on what they can do

2026-10-15T14:51:41Z•10253cfedbd7f9c21bda43afef4d2a9a48a57dbda7d5d59ca95ac842911ea1a0
CVE-2026-0322CVE-2026-105133CVE-2026-105134CVE-2026-76519AI agentsAI governanceAI securityAhsayCBSCISA KEVCisco Secure Email GatewayKGB RATMCP securityNjRATPalo Alto PAN-OSStorm-3119YAM Storeactive exploitationcommand injectioncredential theftcyber risk remediationfake CAPTCHAidentity and access managementpath traversalphishingphishing kitsremote access trojanremote code executionsocial engineeringwebcam spying

What happened

Help Net Security roundup covering AI-agent governance and permissions, malware and phishing campaigns, actively exploited vulnerabilities in Palo Alto, Cisco, and Ahsay products, exposed AI infrastructure, and software-delivery risks. The most urgent item is CISA’s addition of four vulnerabilities to the KEV catalog, indicating active exploitation: CVE-2026-0322, CVE-2026-76519, CVE-2026-105133, and CVE-2026-105134.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
helpnetsecurity
Record identifier
10253cfedbd7f9c21bda43afef4d2a9a48a57dbda7d5d59ca95ac842911ea1a0
Enrichment time
2026-10-15T14:51:41Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.