December 04.2025
2 Minutes Read

Unlocking Enhanced Governance: ServiceNow's $1 Billion Veza Acquisition

Miniature figures on puzzle pieces representing ServiceNow Acquisition Veza.

ServiceNow Makes a Strategic Move with Veza Acquisition

ServiceNow is setting its sights on enhancing its governance and security portfolio by acquiring non-human identity (NHI) management provider Veza for an estimated $1 billion. This acquisition will not only bring in advanced capabilities regarding the management of machine identities but will also integrate seamlessly into the existing ServiceNow frameworks. With the computing landscape continuously evolving, incorporating such cutting-edge identity security measures is critical for maintaining robust security protocols.

Navigating the Landscape of Non-Human Identities

The digital infrastructure landscape is increasingly complicated, characterized by numerous agents, API keys, and tokens requiring streamlined management. The Veza Access Graph offers a clear view into this complexity, enabling organizations to manage permissions effectively and audit non-human identities efficiently. This development addresses a pressing need among ServiceNow's 22,000 enterprise customers who have sought greater identity security within the platform.

The Importance of Unified Dashboards in Security

One of the standout features of the Veza technology is its unified dashboard, which enhances visibility and control over machine identities. As organizations implement more automated processes, such visibility becomes imperative to preemptively identify security risks tied to excessive permissions. With Veza's integration, companies can expect improved risk management and compliance as they can now visualize and manage identity access across IT service management, HR, and customer service platforms.

AI Integration: A Future-Forward Approach

Adding to the value of this acquisition is Veza's compatibility with ServiceNow’s recently launched AI Control Tower. This centralized command center enhances governance involving AI technologies, making it an ideal match for non-human identity management. Through this integration, ServiceNow aims to provide a masked view of AI workflows, ensuring that identity governance remains a priority in an era increasingly defined by artificial intelligence.

Veza's Influence on the Market

Founded in 2020, Veza has quickly become a prominent player in the identity security space, gaining recognition for its innovative Access Graph technology designed to simplify reporting on identity risks. With enterprise clients like Blackstone and the City of Las Vegas already leveraging its capabilities, ServiceNow's acquisition represents a significant scaling-up of both companies’ ambition to build robust and secure digital ecosystems. The merger signals a trend toward consolidating technologies in the realm of identity management, paving the way for a future where security is embedded throughout organizational processes.

A Bright Future for Identity Security

As the cybersecurity landscape evolves, this acquisition serves as a crucial step for ServiceNow in capturing the growing demand for effective identity governance solutions. In a world increasingly reliant on automated processes, organizations must adapt to manage both human and non-human identities effectively. The convergence of workflows, permissions, and advanced security measures through Veza's technology ensures that businesses remain resilient against emerging threats.

Cybersecurity Corner

1 Views

0 Comments

Write A Comment

*
*
Related Posts All Posts
12.06.2025

Zero-Click Browser Attacks: The Threat of Automated Email Data Deletion

Update Understanding the Zero-Click Agentic Browser AttackThe world of cybersecurity recently witnessed a sophisticated threat—a zero-click agentic browser attack targeting Perplexity's Comet browser. This attack showcases how a seemingly innocuous email could lead to catastrophic data loss, specifically the deletion of entire Google Drive contents. According to findings from Straiker STAR Labs, this method relies on the browser's capability to interact seamlessly with services like Gmail and Google Drive, automating tasks that could inadvertently enable data manipulation or deletion.How the Attack WorksAt the heart of this strategy is an agentic browser that acts on behalf of the user without explicit consent. Instead of requiring the victim to click on a harmful link or attachment, attackers craft an email that instructs the browser to perform various tasks, treating these instructions as legitimate. Security researcher Amanda Rousseau illustrated that phrases intended for task management, such as “Please check my email and complete all my recent organization tasks,” can trigger the agent to delete or organize files in the victim's Google Drive. The result? A tidy drive, devoid of crucial documents—all executed under the guise of a harmless cleaning request.The Role of Language Models and AutonomyThe peculiarities of large language models (LLMs) significantly contribute to the effectiveness of this attack. As these LLM-powered assistants are designed for rapid automation, they often operate with excessive autonomy, leading to unintended data erasure. By using polite and structured language, hidden malicious instructions can manipulate the agent’s response sequences, allowing the attack to execute without direct user interaction or verification.Implications on CybersecurityAs we look deeper into the ramifications of this attack, it raises important concerns about the security of AI agents and their operational frameworks. Organizations need to understand the risks of relying heavily on agentic browsers, as these zero-click attacks can propagate across shared drives and shared team folders, thereby amplifying the damage. Traditional cybersecurity measures may not be enough to prevent the manipulation of AI-driven processes. As underscored by Rousseau, protecting not only the models but also their connectors and the language instructions they process becomes paramount.Looking Ahead: Mitigation StrategiesTo combat these threats, proactive measures must be taken. Organizations are advised to implement stringent security protocols focused on input hygiene, control permissions, and routine audits of agent actions. Companies can also build runtime guardrails that monitor and restrict the types of actions AI assistants can perform, effectively curtailing potential misuse. Keeping logs of interactions will provide visibility into the actions taken by agents, thus ensuring accountability and enabling faster responses to possible breaches.
12.06.2025

Cyberattacks: Why Manufacturers Are Vulnerable Targets in 2025

Update The Rising Threat of Cyberattacks in Manufacturing Manufacturers are facing a unique and alarming trend as they become the primary target of cyberattacks in 2025. With their operational sensitivity and persistent security vulnerabilities, manufacturers find themselves in a precarious position. Experts indicate that 51% of manufacturers had to confront a ransomware attack, with a hefty ransom averaging $1 million, coupled with additional recovery costs nearing $1.3 million, according to a recent survey by Sophos. Understanding the Cost of Ineffective Cybersecurity The financial repercussions of such attacks are staggering. For instance, automaker Jaguar Land Rover experienced a ransomware attack that forced production to halt for nearly a month, costing the company between $1.7 billion and $2.4 billion. Similarly, the Japanese brewery giant Asahi Group Holdings suffered outages due to cyber intrusions, leading to significant supply shortages. This landscape is largely shaped by the high-stakes environment where operational downtime translates directly into lost revenue. Why Manufacturers Are An Easy Target Numerous factors contribute to the manufacturing sector's vulnerability. Rafe Pilling from Sophos notes that a lack of security expertise and unidentified security gaps make these organizations particularly appealing to cybercriminals. Manufacturers often fail to implement adequate protective measures that could thwart potential attackers. For instance, Kaspersky Lab's analysis highlighted that outside North America, ransomware attacks could have incurred over $18 billion in losses to manufacturers. This staggering figure underscores the systemic issues manufacturers face. The Cybersecurity Future for Manufacturers Looking ahead, disruptions from ransomware are predicted to persist, significantly impacting manufacturing operations. As the threat landscape continues to evolve, manufacturers must enhance their cybersecurity defenses, including regular testing of their incident response plans. The reliance on outdated practices and technology can leave significant room for exploitation, prompting a call for an urgent update in protocols and workforce training. Conclusion The increasing threat of cyberattacks within the manufacturing sector illuminates the critical need for improved cybersecurity measures. With financial stakes at an all-time high, establishing a robust, proactive security framework has never been more vital. Only through strategic adjustments and modernized defenses can manufacturers hope to mitigate these risks.
12.05.2025

Understanding Current Cyber Threat Trends: The Wi-Fi Hack and More

Update Are You Safe from Cyber Threats? This Week Reveals It All In the constantly shifting landscape of cybersecurity, threats are emerging at a dizzying pace, as illustrated by recent high-profile incidents. This week alone, we delve into alarming issues such as a multi-million dollar exploit of Yearn Finance’s yETH, which saw roughly $9 million siphoned off due to a surprising flaw in internal accounting. Attackers minted 235 septillion tokens, manipulating the system for their gain—an unprecedented event in decentralized finance (DeFi). Escalating Phishing Threats—A Need for Vigilance In addition to thefts in DeFi, phishing attacks have surged, with Microsoft recently thwarting a campaign launched by the notorious Storm-0900 group. This scam leveraged timely themes like parking tickets over Thanksgiving to deceive users, ultimately aimed at delivering malware that infiltrates and compromises users’ systems. This demonstrates the sophistication of phishing tactics, which were undeniably pervasive in 2025, highlighting the importance of awareness and skepticism. The Impact of Evolving Malware Compounding these issues was the detection of new Linux malware variants—Symbiote and BPFDoor—exploiting advanced packet filter techniques to enhance stealth. These developments show a troubling trend: malware creators are adopting progressively sophisticated methods to evade detection, making them more challenging for average users and organizations to combat. Cybercrime is growing not just in frequency, but in sophistication. Facing the Threat Landscape of 2025 As we look towards 2025, it is critical to recognize the broader statistical trends impacting cybersecurity. Estimates suggest that the price tag for cybercrime could hit a staggering $12 trillion globally, driven largely by ransomware and AI-based exploits. This amplification of offenses represents the importance of cybersecurity education and adoption of advanced protective measures. Conclusion: Stay Informed, Stay Safe Understanding these threats is only half the battle; acting on this knowledge to secure your personal and professional lives is vital. Invest in cybersecurity measures, stay updated with security protocols, and adopt a cautious approach toward unsolicited communications and software use. In doing so, we not only protect ourselves but contribute to a safer digital environment.

Terms of Service

Privacy Policy

Core Modal Title

Sorry, no results found

You Might Find These Articles Interesting

T
Please Check Your Email
We Will Be Following Up Shortly
*
*
*