MEDIUM/ SEPTEMBER 1, 2026TODAY’S BRIEFING — #165
Kaspersky, Microsoft, Anthropic hit by infostealers; ransomware escalates AI tools
Infostealer malware targets Anthropic and Microsoft users; Aurora ransomware gang deploys Cursor AI; North Korean threat actors expand beyond IT into healthcare and sales.
CVE-2026-18885ServiceNow AI Platform — Unauthenticated code injection (CWE-94) in the ServiceNow AI Platform allowing arbitrary code execution and access to instance data; remediated by ServiceNow.CVE-2026-18886ServiceNow AI Platform — Improper access control (CWE-284) in the ServiceNow AI Platform enabling unauthorized data creation/modification and privilege escalation; remediated by ServiceNow.CVE-2026-74820ServiceNow AI Platform — SQL injection (CWE-89) in the ServiceNow AI Platform permitting arbitrary SQL statements against the backend database; remediated by ServiceNow.CVE-2026-6876ServiceNow Now Platform — Unauthenticated sandbox escape (CWE-94) in the ServiceNow Now Platform enabling code execution within the Now Platform; remediated by ServiceNow.
Read the full briefing →