Critical ServiceNow code execution flaw now exploited in attacks

Published on July 20, 2026

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. [...]

Continue reading on website
Other news

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

July 20, 2026
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02.The overflow lets an attacker "execute code in the context of the current process," per the

Windows KB5121767 OOB update fixes shutdowns on some Dell PCs

July 20, 2026
Microsoft has released emergency updates to fix a known issue causing some Dell PCs to shut down after installing the July 2026 Windows 11 security updates. [...]