Archive for May 5, 2026

Nerdio Manager for Enterprise 8.0 Delivers New Capabilities to Help Organizations Modernize End-User Computing Infrastructure at Their Own Pace 

Posted in Commentary with tags on May 5, 2026 by itnerd

Nerdio today announced Nerdio Manager for Enterprise 8.0, enabling organizations to modernize their end-user computing infrastructure wherever they are in their Windows Cloud journey without being forced down a single path. The updated platform introduces: 

Nerdio Manager for Enterprise 8.0’s new features represent a significant expansion into hybrid deployment models, global orchestration, DevOps alignment, and AI-driven operations. In addition to the Azure Virtual Desktop Hybrid on NCP public preview, other key capabilities include: 

  • Simplified Nerdio Manager install: Version 8.0 introduces advanced Terraform support, enabling administrators to automate the Nerdio Manager installation with an infrastructure-as-code approach to deployment and provisioning. Modern DevOps teams can now use a scripted approach to help automate the installation and reduce manual configuration workflows. 
  • Assess Windows 365 and Azure Virtual Desktop modernization readiness: Nerdio is making it easier than ever before to assess your existing VDI deployment for modernization. Nerdio Compass, available in private preview, can quickly assess infrastructure utilization, user assignments, licensing models, and policy configuration to help guide your migration planning to Windows 365 or Azure Virtual Desktop. 
  • Rapidly scale Windows Cloud infrastructure: With Nerdio Manager’s new Global Pools capabilities, admins can deliver desktops across Azure regions and subscriptions from a single, unified pool. As demands for infrastructure increase in the AI era, Global Pools will make it easy to navigate any capacity constraints and simplify global deployments.  
  • Simplified Microsoft Intune policy and script management: Designed to reduce policy management overhead, the new Intune Policy Studio in Nerdio Manager 8.0 streamlines and simplifies the management of Microsoft Intune policy creation, configuration, assignment management, and results visibility from a centralized console. It includes support for change management, versioning, backups, and restoration of scripts to known working versions—all with full auditing of change history.  
  • Expanded Windows Cloud and physical endpoint insights: Nerdio Manager for Enterprise 8.0 provides expanded visibility and reporting across Windows 365, Azure Virtual Desktop, and physical endpoint user experience and endpoint performance. The enhanced visibility improves monitoring and decision-making while reducing time spent troubleshooting. 

Nerdio Manager for Enterprise 8.0 will be available for public preview in late May. To learn more about how it can help transform your virtualization deployments, click here.  

More than 3,000 gift cards recovered in elaborate Houston, Austin area theft scheme 

Posted in Commentary with tags on May 5, 2026 by itnerd

Last week the Texas Financial Crimes Intelligence Center (FCIC), in collaboration with the Texas Department of Public Safety (DPS), the Hays County District Attorney’s Office, and the Hays County Proactive Unit, successfully dismantled a sophisticated organized gift card tampering operation

The multi-phase investigation resulted in the arrest of three suspects and the recovery of 11,563 gift cards. Based on the total potential value of the recovered cards, authorities estimate the operation prevented approximately $5,699,650 in financial losses to consumers.  

The Texas Retailers Association successfully advocated for the passage of SB 1809, which went into effect on September 1, 2025, creating the offense of gift card fraud and establishing penalties based on the number of unactivated gift cards in an individual’s possession. To date, close to 20 states have passed similar laws or are awaiting Governor signatures.  

Learn more https://www.tdlr.texas.gov/media/pressrelease/2026-04-29-gift-card-scheme.pdf  

ServiceNow University drives career growth with real-time coaching and simulation

Posted in Commentary with tags on May 5, 2026 by itnerd

Today, at ServiceNow’s annual customer and partner event, Knowledge 2026, ServiceNow introduced AI Learning Guide and SimStudio within ServiceNow University, an AI learning platform transforming workforce development for the AI era. The new capabilities give customers, partners, and individual learners, including ServiceNow’s own global workforce, a faster, more personalized path to building real-world skills on the ServiceNow AI Platform.

The World Economic Forum projects a net gain of 78 million jobs by 2030, driven by technology, demographics, and economic shifts, with AI and big data topping the list of fastest-growing skills. This underscores an urgent need for reskilling.

The industry’s answer until now has been static instruction sheets, pre-recorded videos, and time-based certifications that measure course completion instead of competency. People need a safe space to experiment with AI in the flow of work, build confidence through practice, and chart a clear path to the careers emerging inside agentic businesses built on the ServiceNow AI Platform. ServiceNow University is that space: an open playground for learning where everyone is welcome, built on the science of play to counteract the fear of failure and make skill-building sustainable.

AI Learning Guide and SimStudio drive AI career readiness with a coach + practice model

Most enterprise learning platforms deliver a catalog of content. Learners scroll through courses across multiple learning tools, with no guidance on what matters for their role.

AI Learning Guide changes that. It is a conversational AI coaching companion embedded directly into ServiceNow University that guides learners through personalized learning paths, surfaces relevant courses and certifications, and provides real-time coaching and feedback. AI Learning Guide delivers contextual recommendations and next steps, and acts as the coaching layer that transitions learners into simulation-based practice.

SimStudio is a hands-on simulation environment that lets learners prove competencies by practicing and performing ServiceNow tasks. Unlike videos or quizzes, SimStudio captures how a learner works, not just whether they finished a course, enabling richer competency insight. It flags whether they used ServiceNow best practices and offers feedback and alternative methods accordingly.

Together, AI Learning Guide and SimStudio accelerate time-to-competence and give learners confidence that they can do the work, not just pass a test. AI Learning Guide tailors the journey; SimStudio delivers the prove-it moment.

Underpinning both tools is a personalized learning profile that matches recommendations to each learner’s role, usage patterns, skills, and behaviors, surfacing what to learn next without requiring learners to navigate the full catalog. The profile applies “people like you” logic so a system administrator in financial services with heavy ITSM usage receives different guidance than one in manufacturing.

ServiceNow University reaches almost 2 million learners with 80% growth year-over-year

Without certified talent, enterprise AI investments stall, depleting leadership pipelines and slowing the innovation those investments were meant to accelerate. ServiceNow University is helping close that gap at scale.

One year after its launch at Knowledge 2025, ServiceNow University has grown to nearly 2 million learners and 307,000 certified professionals, with momentum across the entire ecosystem: customer learners grew 28%, partner participation increased 17%, and employee participation jumped 24% year over year.

According to an IDC study, sponsored by ServiceNow, organizations that complete ServiceNow training and certifications see a 536% ROI on training investments in the first three years through staff efficiencies, cost savings, improved productivity, and +16% productivity gains through upskilled employees.

Training and certifications also drive measurable partner and customer growth. According to a ServiceNow study, when partner teams have a certified implementation lead, their customers go live one month faster and report higher satisfaction scores. Customers with certified implementors show 7-point higher gross retention and 14-point higher net retention. The pattern is consistent: more certified professionals correlate with higher license usage, greater app deployment, and stronger retention.

Availability

• ServiceNow University is free and available to all employees, customers, partners, and individual learners at learning.servicenow.com.

• AI Learning Guide and SimStudio are available to learners today.

• ServiceNow University is expanding its reach to new markets: New Arabic language support launched in March 2026; localized content in Brazilian Portuguese is underway.

• ServiceNow University’s new capabilities are part of a broader wave of AI platform innovation ServiceNow will unveil at Knowledge 2026, taking place May 5–7 at The Venetian Expo Center in Las Vegas. For more information on Knowledge 2026, visit servicenow.com/events/knowledge

ServiceNow extends agentic AI governance from desktops to data centers with NVIDIA

Posted in Commentary with tags , on May 5, 2026 by itnerd

ServiceNow today announced a significant expansion of its partnership with NVIDIA to extend agentic AI governance from desktops to data centers. This includes the introduction of Project Arc, a new enterprise autonomous desktop agent, secured by the NVIDIA OpenShell runtime and governed by ServiceNow AI Control Tower, that will live on employee desktops and autonomously complete complex work. ServiceNow AI Control Tower is also now included in the NVIDIA Enterprise AI Factory validated design, extending enterprise governance to large-scale model workloads. The companies are advancing enterprise AI even further with an open benchmarking standard for evaluating AI agents.

ServiceNow and NVIDIA have long partnered to bring enterprise-grade AI to some of the world’s largest organizations through open models, AI software, and agent-ready skills. From the development of specialized agents to the Apriel Nemotron open model family, the partnership has deepened at each stage of the AI era. Today’s announcement connects how work gets done with how AI runs, bringing execution, governance, and intelligence to user endpoints and AI infrastructure.

Project Arc: An enterprise autonomous desktop agent that is governed and secure from day one

ServiceNow is introducing Project Arc, which is an enterprise autonomous desktop agent that thinks, writes code, executes, and adapts when things don’t go as expected, completing complex multi-step work across enterprise tools and systems without requiring pre-built workflows.Every action the agent takes runs inside NVIDIA OpenShell, a sandboxed runtime environment that adds policy-based management so that autonomous activity stays contained, auditable, and enterprise safe. ServiceNow AI Control Tower governs the actions the agent takes, setting policies, monitoring behavior, and logging files read, commands executed, and APIs called. The result is an autonomous desktop agent that enterprise security leaders can fully audit and approve with confidence.

Powered by ServiceNow Action Fabric, which allows any AI agent to access the ServiceNow system of action, and grounded in the ServiceNow Configuration Management Database (CMDB), the agent has deep intelligence about the enterprise, pulling from workflows, systems, and operational history so that actions are informed by how work gets done. Project Arc also meets employees where they work through a desktop app, enterprise collaboration tools, or email, and is designed to provide the same governed execution, whatever the interface.

Governing large-scale AI model workloads

The ServiceNow AI Control Tower integration with the NVIDIA Enterprise AI Factory validated design was previewed at NVIDIA GTC in March and is now complete, extending enterprise governance to the infrastructure layer where large-scale AI model workloads run. For organizations managing AI at scale, this integration provides a unified governance layer for data centers. AI factory deployments governed by AI Control Tower gain continuous value, risk, and security management across the full model lifecycle, from discovery and inventory to real-time observability, compliance monitoring, and remediation.

Capabilities available to AI factory customers through AI Control Tower include expanded regulatory content packs, enterprise access maps for major cloud providers, and a runtime cost and ROI management framework that tracks productivity gains and monthly value indicators.

Measuring and advancing enterprise AI together

ServiceNow and NVIDIA are advancing NOWAI-Bench, an open benchmarking suite comprising two frameworks: EnterpriseOps-Gym, a multi-step agentic evaluation framework spanning IT service management, customer service, and HR workflows, and EVA-Bench, a voice agent evaluation framework designed for enterprise settings. Both benchmarks are generally available as open- source releases, and NVIDIA is integrating both into NeMo Gym to make them reusable and accessible for automated model evaluation across the industry.

The collaboration is already producing results. NVIDIA has evaluated NVIDIA Nemotron 3 Super on EnterpriseOps-Gym, with results demonstrating leading performance among open-weight models.

On the voice side, EVA-Bench is serving as a primary benchmark for the development of NVIDIA Nemotron VoiceChat model, with ServiceNow and NVIDIA planning to publish joint evaluation results as the model reaches availability.

Availability

Project Arc is available as an early preview. AI Control Tower integration with the NVIDIA Enterprise AI Factory validated design is generally available. NOWAI-Bench, including EnterpriseOps-Gym and EVA-Bench, is available now as an open-source release. 

ServiceNow expands AI agent governance through deeper integration with Microsoft

Posted in Commentary with tags , on May 5, 2026 by itnerd

ServiceNow today announced an expansion of its strategic partnership with Microsoft that brings order to the chaos of AI agent sprawl. The partnership includes a deepened product integration between ServiceNow AI Control Tower and Microsoft Agent 365, extending AI Control Tower’s existing governance across Azure-backed Microsoft Foundry and Copilot Studio to Microsoft Agent 365’s AI agent ecosystem. ServiceNow AI specialists will also be available in the Microsoft Agent 365 Marketplace, allowing the ServiceNow Autonomous Workforce to operate across the Microsoft 365 tools that employees use.

Governing AI agents is critical, now more than ever, as enterprises accelerate their deployment of agentic technology across systems, teams, and tools at unprecedented speed. Realizing the full value of this investment requires a unified approach to governance, identity and permission management, and control that spans every platform across which AI agents operate. ServiceNow is working with partners like Microsoft to give enterprises the visibility to see AI agents, models, tools, and prompts in their environment, which gives them the control to govern them consistently and the interoperability to put them to work across the tools employees already use.

Unified control for a multi-agent enterprise

ServiceNow AI Control Tower already connects to Microsoft Foundry and Copilot Studio to discover AI assets, enforce governance policies, and drive consistent oversight. The new AI Control Tower integration with Microsoft Agent 365 expands these capabilities by extending visibility and governance insights across Microsoft Agent 365’s AI agent ecosystem. This gives IT and operationsteams enhanced visibility into agent activity across ServiceNow and Microsoft ecosystems, regardless of where these agents were built or deployed.

Through the integration, ServiceNow AI Control Tower gives administrators the ability to review and approve ServiceNow AI specialists prior to submission to the Microsoft Agent 365 Marketplace, where Microsoft publishing and policy controls apply. This helps ensure that every ServiceNow AI specialist that interoperates with the Microsoft 365 environment has been vetted, permissioned, and authorized for deployment.

ServiceNow AI specialists come to work across Microsoft 365 applications

In the Microsoft Agent 365 Marketplace, a ServiceNow AI specialist will appear in the org chart as a digital employee with defined roles, permissions, and accountability.

This allows the AI specialists to be able to take actions such as drafting a Word document, responding to email messages in Outlook, or acting on an assigned comment in PowerPoint, subject to Microsoft 365 permissions, identify, and admin policy controls, while consumption is tracked across both ServiceNow’s and Microsoft’s metered usage models.

Years of innovation for one autonomous future

Today’s announcement builds on years of collaboration between ServiceNow and Microsoft on behalf of enterprise customers, spanning cloud infrastructure, productivity, and AI. This is the next step in that shared commitment to making enterprise AI governable, interoperable, and scalable. In addition to the integrations announced today and as part of their ongoing partnership, ServiceNow and Microsoft are expanding their go-to-market motion to include autonomous IT. This combines ServiceNow’s AI specialists and workflow intelligence with Microsoft’s cloud infrastructure and productivity ecosystem to deliver governed, autonomous IT operations to mutual customers at scale.

The AI Control Tower and Microsoft Agent 365 integration is available in preview, and ServiceNow

AI specialists will be available in Microsoft Agent 365 Marketplace later this year. Learn more about how ServiceNow is expanding its Autonomous Workforce of AI Specialists to major business functions at Knowledge 2026 here, and how it’s introducing new AI Control Tower capabilities to further discover, observe, govern, secure, and measure AI deployed across the enterprise here.

ServiceNow and Lenovo help organizations reduce costs, accelerate productivity, and improve governance with AI-native operations

Posted in Commentary with tags , on May 5, 2026 by itnerd

Today, at ServiceNow’s annual customer and partner event, Knowledge 2026, Lenovo and ServiceNow announced an expanded multi-year strategic agreement to enable enterprises to reduce IT support costs, accelerate employee productivity, improve operational control, and strengthen governance through AI-native workflow automation.

By combining Lenovo’s real-time device intelligence, digital workplace services, and device lifecycle management capabilities with the ServiceNow AI Platform, organizations can automate key workflows end to end across the device lifecycle, delivering more consistent and scalable operations with enhanced security, visibility, governance, and control across operations.

From fragmented operations to integrated, automated workflows At Knowledge 2026, Lenovo and ServiceNow are introducing a connected solution designed to simplify operations and enable more efficient, controlled, and scalable service delivery. The solution combines:

  • Real-time device intelligence through Lenovo’s xIQ Digital Workplace Platform built on ServiceNow
  • Lenovo device lifecycle management and device-as-a-service capabilities
  • Lenovo consulting, implementation, and end-to-end managed services
  • ServiceNow’s AI Control Tower, Workflow Data Fabric, Technology Provider Service Management, workflow orchestration, and enterprise-scale architecture
  • Lenovo Workplace Services Operations Suite built on ServiceNow, a portfolio of apps that bring together operational visibility, lifecycle workflows, and safeguaded data management to simplify service delivery and scale automation

Differentiated by real-time device intelligence at global scale

Lenovo’s device intelligence platform analyzes data across a global footprint of enterprise endpoints—creating a continuous feedback loop between device performance, service operations, and business workflows. ServiceNow operationalizes that intelligence through AI-driven workflow automation, enabling organizations to orchestrate actions across systems, teams, and services.

Based on Lenovo’s internal testing, this approach enables:

  • Up to 30% reduction in IT support costs by reducing ticket volumes through predictive issue detection and automated remediation
  • Up to 50% faster employee onboarding and time to productivity by eliminating device-related onboarding delays
  • Up to 30% improvement in employee experience through consistent, always-on service delivery
  • Up to 40% of IT issues resolved proactively before user impact through consistent, always-on service delivery

Accelerating time to value with AI-enabled managed services

The collaboration expands Lenovo’s ability to deliver managed AI services for enterprise organizations from 5,000 to 50,000 employees. By combining Lenovo’s global delivery infrastructure with ServiceNow’s AI platform and ecosystem, enterprises can accelerate time to value while reducing the risk and cost associated with large-scale transformation programs. Organizations can standardize service delivery, improve performance, and scale AI operations without rebuilding systems market by market.

Global expansion

The collaboration launches across Australia, New Zealand, Hong Kong, Singapore, and Ireland, with continued global expansion planned. ServiceNow will support this with global partner management, multi-geo onboarding, and dedicated enablement resources. This enables multinational organizations to deploy a consistent operating model across regions while maintaining local flexibility and governance.

ServiceNow brings Autonomous Workforce to every major business function

Posted in Commentary with tags on May 5, 2026 by itnerd

Today, at ServiceNow’s annual customer and partner event announced a major expansion of its Autonomous Workforce, launching new AI specialists for IT, customer relationship management (CRM), employee service teams, and security and risk. Together with the previously announced L1 IT Service Desk AI Specialist, which is now available, these AI specialists complete end-to-end processes alongside humans to autonomously resolve cases, contain threats, manage incidents, and handle high-volume employee requests.

Enterprises today run on a patchwork of systems where talented people spend time answering routine questions, triaging backlogs, updating records, and racing between fire drills. The work that moves the business, such as strategic decisions, relationship building, and risk assessment, gets pushed to the margins as a result. Autonomous Workforce deploys role-scoped AI specialists embedded in proven workflows to deliver outcomes from start to finish, without human intervention.

Because AI specialists run on the same platform, they share the same operational intelligence (Configuration Management Database and Context Engine), data connectivity (Workflow Data Fabric), conversational front door (ServiceNow EmployeeWorks), and governance infrastructure (AI Control Tower). ServiceNow announced in April that all of these capabilities are now included across every product and package; not as add-ons but built-in by default. This allows enterprises to build on years of platform investment and achieve speed, scale, and oversight, without adding complexity or extending time to value. ServiceNow has also expanded the reach of its Autonomous Workforce to more customers in partnership with Amazon Web Services (AWS), Google Cloud, Microsoft, and NVIDIA, enabling AI specialists to deploy and run across the infrastructure enterprises already use.

Autonomous IT: from reactive firefighting to autonomous resilience

IT teams today face a backlog of unresolved incidents, security findings, and operational recommendations that grow faster than any team can act on, consuming bandwidth that should be going toward AI governance, strategic investment, and platform scale. The L1 IT Service Desk AI Specialist is already resolving assigned IT cases 99% faster than human agents within ServiceNow’s own help desk. Building on that foundation, ServiceNow is introducing a wave of new IT AI specialists spanning infrastructure monitoring, site reliability (SRE), asset lifecycle, portfolio planning, and more.

For example, a new specialist for AIOps autonomously detects anomalies, correlates events, and triggers remediation, while a specialist for SRE handles incident triage and postmortem documentation end to end, so IT teams can shift attention from reactive firefighting to strategic infrastructure investment. Other new AI specialists for common IT workflows give full visibility into hardware, software, and cloud assets across their lifecycle, and connect demand to capacity, budget, and resource availability in real time.

Autonomous CRM: AI that acts on customer interactions

Legacy CRM systems track sales activities and service interactions but don’t fulfill customer requests. Whether a customer is requesting a quote, asking to expedite an order, or disputing a charge, the goal should be to give them what they want, not open new opportunities or tickets. The gap between front-office interaction and back-office fulfillment is where customer experience breaks down. According to Ipsos research, sales representatives spend just 10 hours a week talking to customers. At the same time, ServiceNow’s CX Shift research shows that service agents still need to work in three to five systems to resolve a single customer issue, with the rest of their time lost to CRM updates, manual handoffs, and administrative overhead.

ServiceNow Autonomous CRM is built to finish the work, from speed of thought sales to customer service automation. Today, ServiceNow is introducing new AI specialists across the entire customer lifecycle, including sales qualification and quoting, order fulfillment, invoice disputes, service, and renewals. Starting with case management, an AI specialist can triage, solve, and escalate cases across channels, as well as generate custom quotes from meeting transcripts. Each month, ServiceNow Autonomous CRM resolves over 100 million customer cases, orchestrates over 16 million orders, and configures more than seven million quotes. These AI specialists go further, delivering quotes, orders, and issue resolution faster for customers.

Employee services: an AI workforce for every team, across every function

HR, finance, legal, procurement, and workplace services teams face structural challenges at scale, including rising case volumes and service desks dependent on manual triage. Based on ServiceNow estimates, 23 million employees use ServiceNow’s employee portal every month, generating an estimated 40 million-plus cases annually.

This is routine, repeatable work that’s ideal for autonomous resolution.

ServiceNow is introducing new AI specialists across HR, workplace services, legal, finance, procurement, supplier management, and health and safety. Each acts as a digital employee that is equipped with role-specific skills. Across ServiceNow’s customer base, they’ve been shown to resolve 91% of the cases without reassignment. Requests are deflected before they become cases, and when cases are created, they route directly to the right AI specialist.

This allows business operations teams to focus on tasks like workforce planning, supplier strategy decisions, financial planning, contract negotiations, and more.

Security and risk: containing threats in minutes

Security and risk teams are overwhelmed: vulnerabilities accumulate faster than teams can triage them, supercharged by AI-powered attack surface expansion; phishing incidents demand immediate investigation across disconnected tools; and manual response processes stretch resolution from minutes to hours. Legacy point solutions simply weren’t built to keep pace with the AI platform shift.

ServiceNow’s new Autonomous Security & Risk solution introduces AI specialists purpose-built to help eliminate growing backlogs across the full threat landscape, autonomously triaging and remediating vulnerabilities (including hardware-level), investigating and containing SOC incidents with humans-in-the-loop, and screening third-party vendor risk with instant summaries so teams focus only on what needs scrutiny. Together, they compress tasks that typically take days or hours into minutes, bringing identity visibility and governance, cyber asset intelligence, enterprise decision context, and autonomous security operations together on the ServiceNow AI Platform.

Availability

L1 IT Service Desk AI Specialist, CRM AI specialists, and AI specialists for employee service teams are available now. IT AI specialists are expected to be available in June 2026. The security and risk AI specialists are expected to be available for preview in June 2026 and generally available in September 2026.

ServiceNow launches Autonomous Security & Risk, integrating Armis and Veza to govern every AI agent, identity, and connected asset

Posted in Commentary with tags on May 5, 2026 by itnerd

Today, at ServiceNow’s annual customer and partner event, Knowledge 2026, ServiceNow launched Autonomous Security & Risk to govern every AI agent, identity, and connected asset. Armis delivers continuous asset intelligence across code, IT, OT, IoT, and connected assets. Veza provides fine-grained visibility, intelligence, and governance for human and non-human identities. The result of this combination is one of the most complete security, risk, and compliance platforms in enterprise AI.

Security and risk crossed $1 billion in annual contract value (ACV) for ServiceNow last year, making it one of the fastest-growing sources of demand on the ServiceNow AI Platform. The pressure is compounding as AI exponentially multiplies identities, permissions, connected assets, and decisions that require governance. AI agents acquire access, execute decisions, and operate at machine speed – and the non-human identities behind them already vastly outnumber human ones. Who approved that access, why it exists, and whether it remains valid are questions most enterprises cannot answer. Disconnected security tools cannot close this gap; a platform approach can.

Every AI agent is an identity, with most ungoverned

Every AI agent that acts inside an enterprise does so through an identity. It accesses systems, reads data, and executes workflows under a set of permissions that were almost certainly designed for human actors, rather than the speed, scale, or autonomy of AI agents. Closing the identity visibility, intelligence, and governance gap is critical.

Veza’s Access Graph provides a continuous, real-time map of every access relationship across an enterprise environment, including what has access, what it can do with that access, and how these change as context shifts, systems evolve, and agents multiply. With Veza now integrated into the ServiceNow AI Platform, this capability governs both human and non-human identities within a single operational framework: surfacing risk, enforcing least privilege at the point of action, triggering downstream remediation, and building the traceable institutional memory that auditors and regulators require. ServiceNow Veza works in concert with ServiceNow’s existing vulnerability, exposure, and incident management capabilities to close pre-breach & post-breach exposure: governing who and what has access and continuously identifying and remediating permission-related vulnerabilities.

You cannot secure what you cannot see

Asset visibility has always been a foundational requirement of enterprise security, along with a persistent failure point. The environments enterprises operate in today span pre-compiled code, IT infrastructure, operational technology, connected devices, cloud workloads, medical equipment, and now AI agents, interacting across boundaries that no single tool was ever meant to fully see.

Once integrated into ServiceNow, Armis will deliver real-time, contextual awareness of every connected cyber asset, including the devices and systems conventional tools had no visibility into. Armis will monitor network traffic without agents, without disrupting operations, and enrich every asset record with device type, classification, firmware version, behavioral data, and real-time risk posture. This intelligence flows directly into the ServiceNow CMDB, turning a hitherto static inventory into a live picture of the actual attack surface. When an asset is found to be vulnerable, misconfigured, or behaving anomalously, ServiceNow responds at machine speed, in accordance with prevalent environmental context.

Together, Veza and Armis boost ServiceNow’s standing as a platform that knows what exists in the environment and who or what is permitted to interact with it. This real-time asset intelligence feeds directly into ServiceNow’s security incident response workflows, so the same context used to assess risk before a breach is immediately available to contain it after.

The blueprint for trusted AI

When AI acts inside an enterprise, it must do so with the full business reality behind every decision, including governed permissions, continuous oversight, and an audit trail that holds under scrutiny. That is what Autonomous Security & Risk delivers. Asset intelligence, identity governance, risk management, and workflow automation operating as a single system, with AI running across all of it. Two new AI specialists, announced today as part of ServiceNow’s autonomous workforce expansion, handle vulnerability resolution and security operations end to end, autonomously addressing unresolved vulnerability backlogs and investigating phishing incidents alongside human teams.

The ServiceNow AI Control Tower governs agents, ensuring they are inventoried from the moment they appear, risk-scored continuously, and least privilege enforced in real time. Evaluations score agents as they run. If something drifts, the AI Control Tower is able to catch it before it compounds. A2A and MCP interoperability means any agent, on any platform, operates within a governed framework that connects decisions to context and accountability to action. That same governed framework extends across ServiceNow’s partner ecosystem, so the third-party security tools enterprises already rely on feed into a continuously updated picture of enterprise posture. ServiceNow’s own security operations team runs Autonomous Risk & Security, handling incidents seven times faster than prior workflows using AI agents, with every action documented and every decision traceable.

Organizations are already seeing results on the ServiceNow AI Platform. A global energy company operating across 70+ countries saved 1.2 million hours by automating security operations and cut the time it takes to contain threats by 97%. A major U.S. financial services institution eliminated 96% of dormant non-human identities, turning least privilege from a policy goal into an enforced reality. A Fortune 100 aerospace manufacturer reduced the time to complete control attestations by 75% and close compliance gaps by 85%, replacing manual audit prep with evidence that captures itself.

Enterprises that establish this foundation of complete visibility, governed identities, integrated risk, and autonomous response will be decisively ahead as AI accelerates further. ServiceNow gives security and risk leaders a single view of how exposure, incidents, and identity decisions translate to enterprise risk posture in real time, with the audit trail regulators require.

ServiceNow expands AI Control Tower to discover, observe, govern, secure, and measure AI deployed across any system in the enterprise

Posted in Commentary with tags on May 5, 2026 by itnerd

Today, at ServiceNow’s annual customer and partner event, Knowledge 2026, ServiceNow expanded its AI Control Tower offering with new capabilities that give enterprises control over every AI system, agent, and workflow.

AI Control Tower, first introduced at Knowledge 2025, has evolved from visibility and management into a comprehensive, end-to-end solution that lets customers act with confidence across five dimensions:

  • Discover finds AI assets once deployed across the organization — including systems beyond ServiceNow — through 30 new enterprise integrations spanning Amazon Web Services (AWS), Google Cloud, and Microsoft Azure, and enterprise applications such as SAP, Oracle, and Workday. Discovery also extends to non-human identities and connected devices, bringing OT and IoT assets into the same governance model as AI agents and cloud services.
  • Observe provides continuous monitoring with live alerts, replacing periodic audits. Through the recently completed acquisition of Traceloop, AI Control Tower now delivers deep observability into AI agent behavior at runtime, giving teams visibility into how agents reason, where they make decisions, and when to course-correct.
  • Govern delivers AI-driven risk assessment and automated remediation across all types of AI, not only agents but also models, data sets, prompts, and classic machine-learning. Five new risk frameworks aligned to NIST and EU AI Act standards provide compliance controls out of the box.
  • Secure extends identity access governance to hyperscaler AI environments and every connected device through integration with Veza, bringing patented access graph technology, scoped permissions, and least-privilege enforcement to every AI system, agent, and identity. When an agent goes off script or operates beyond its permissions, AI Control Tower can detect it and shut it down in real time — giving organizations the kill switch they need as agents take on more critical work.
  • Measure provides cost tracking and ROI dashboards that give customers financial control as they scale AI— addressing runaway model spend — one of the most pressing challenges enterprises face as AI deployments grow.

This approach is powered by two decades of enterprise operational data accumulated through 100 billion workflows and 7 trillion workflow transactions annually, and anchored by the ServiceNow CMDB and Context Engine, which is designed to map digital assets to the services, people, and processes it supports. Enterprises can sense signals across their full digital estate, decide with live business context, act through autonomous workflows, and secure every agent action. Standalone governance tools simply cannot replicate this. In addition to its existing integrations with Anthropic and OpenAI, ServiceNow has also announced deepened AI Control Tower integrations with AWS, Microsoft, and other LLM providers, extending governance and observability across the infrastructure enterprises rely on most.

Additionally, for all customer Model Context Protocol (MCP) transactions, a new AI Gateway provides real-time controls for agentic workloads, with governance, observability, and security for full visibility across any third-party AI system.

Availability

Features announced today and many more as part of the ServiceNow AI Platform Australia release are available on a rolling basis beginning April 2026. AI Control Tower enhancements enter Innovation Lab in May with general availability expected in August 2026. Full details can be found in the ServiceNow Store.

Additional information

Read more about the ServiceNow AI Platform Australia release.

Microsoft Edge Exposes Passwords In Cleartext

Posted in Commentary with tags on May 5, 2026 by itnerd

On April 29, researcher Tom Jøran Sønstebyseter Rønning, posting as @L1v1ng0ffTh3L4N, presented findings showing that Microsoft Edge decrypts every saved password at startup and holds all of them in process memory, in cleartext, for the entire browser session. The researcher reports that this includes both passwords for sites the user is visiting and every credential the user’s ever saved. The passwords are held in memory from the moment Edge opens.

Uzair Gadit, Founder & CEO, Secure.com

“What makes this Edge finding unusual is not just the technical behavior, it is the assumption behind it. Users are told to follow best practices, use strong passwords and use a password manager, and they did. The problem is the software holding those credentials made a design decision that fundamentally changes the risk, and most users were never made aware of it.

“On its own, requiring administrative access might sound like a limiting factor. In reality, that’s exactly where many enterprise breaches begin. Once an attacker gains privileged access in a shared environment like RDS or Citrix, the difference between decrypting credentials on demand versus holding them all in memory becomes significant. It can turn a single compromised account into a broad credential exposure event across multiple users.

“This is where the cyber sector needs to shift its thinking. We have spent years telling users to improve password hygiene, but this isn’t a hygiene problem, it’s an exposure problem. The question is no longer just how strong a password is, but how long it exists in a usable state, where it exists, and who or what can access it there.

‘The architectural difference highlighted here is important: minimizing the time credentials exist in plaintext reduces risk. Keeping everything decrypted for convenience increases it. Both are intentional design choices, but only one aligns with how attackers increasingly operate, especially with automation and AI make it easier to move laterally once access is established.

“World Password Day tends to focus attention on user behavior. This is a reminder that the bigger risk often sits one layer below that, in the design decisions made by those producing the tools people are told to trust. If those decisions prioritize usability over exposure reduction, then even a user’s perfect password hygiene won’t consistently deliver the security outcome their organizations expect.

“The real takeaway isn’t that passwords are weak, it’s that credential exposure still isn’t being treated as a first-order risk in system design. Until that changes, attackers will continue to focus less on breaking in and more on taking advantage of what’s already available once they are inside.”

This is pretty bad and it is a epic problem that needs to be addressed. I would be very interested to see how Microsoft addresses this as they are the only Chromium based browser to have this issue.