ServiceNow’s sandbox escape RCE hole now exploited in the wild

The excerpt warns that a ServiceNow cloud tenant compromise can expose HR records and CMDB data and enable attackers to pivot into on-premises networks via MID Server integration; it argues enterprises should treat core SaaS platforms as part of their internal attack surface and reassess patching methodologies and sandbox boundaries as vendors embed AI-driven scripting.