AI-Driven Ransomware Compresses Attack Timeline; Chrome and ServiceNow Patch Critical Flaws

Unit 42 observed an AI-assisted ransomware campaign that executed over 50 MITRE ATT&CK techniques in under ten hours, a process that typically takes two weeks. Google's latest Chrome update addresses 26 vulnerabilities, including two critical use-after-free bugs in Shared Tab Groups and WebGL. ServiceNow has released fixes for two critical code injection flaws, CVE-2026-18885 and CVE-2026-18886, in its GraphQL Composite Data API.