CISA Orders Federal Agencies to Patch ServiceNow AI Vulnerabilities Under Active Exploitation
PUBLISHED Aug 29, 2026, 9:32 PM ET
The Cybersecurity and Infrastructure Security Agency has ordered federal civilian agencies to patch three critical ServiceNow AI platform vulnerabilities by September 4, 2026. The flaws, carrying maximum severity scores of 10.0, impact the Washington DC, Vancouver, and Utah releases. ServiceNow confirmed the security issues stem from default configurations permitting unauthenticated access to unprotected file and attachment resources. Active exploitation of these flaws has been connected to the TeamPCP supply chain attack group, which allegedly compromised over 500 global organizations. Australian law enforcement recently arrested two individuals linked to the cyberattacks. Federal civilian agencies face severe risks as malicious actors target enterprise IT management platforms to access sensitive government and corporate data. CISA added the vulnerabilities to its Known Exploited Vulnerabilities catalog to enforce rapid remediation across federal networks. IT teams are racing against the tight deadline as investigations into ongoing data breaches across affected enterprise instances continue nationwide.
By James Porter | JQJO News
Left: Highlighted regulatory oversight failures and corporate software security accountability. Center: Focused strictly on factual government mandates and technical patch schedules. Right: Emphasized national security threats posed by foreign or supply chain actors.
CISA issued an emergency binding operational directive on August 20. https://www.cisa.gov/news-events/directives/binding-operational-directive-26-02
Coverage of Story:
From Left
No left-leaning sources found for this story.
From Center
CISA Orders Federal Agencies to Patch ServiceNow AI Vulnerabilities Under Active Exploitation
JQJO Cybersecurity Dive BleepingComputer The Record SecurityWeek Dark Reading SC Media Threatpost Help Net Security InfoSecurity Magazine The Hacker News ZDNET TechCrunch Reuters Associated Press Bloomberg Wall Street Journal Washington Post CNN Fox News CNBC Federal News Network Nextgov Government Executive FCW Defense One C4ISRNET MIT Technology Review Ars Technica Wired Vice MotherboardFrom Right
No right-leaning sources found for this story.
Comments