$NOW

Simply Wall St says ServiceNow (NYSE:NOW) in early August 2026 launched an Autonomous Security suite, added healthcare AI partner applications, opened its first dedicated Brazil office with academic AI partnerships, and appointed Simon Mouyal as Chief Marketing Officer. The article discusses how these moves affect NOW’s AI investment narrative and cites forecasts of $23.6B revenue and $4.0B earnings by 2029.

Workday (WDAY) shares rose about 18% after Reuters reported that Silver Lake was considering a takeover of the HR and financial-management software company. The report pushed Workday’s market value above $51 billion. Workday reported $9.55B revenue in fiscal 2026, up 13.1%, with $8.83B subscription revenue, up 14.5%. No deal has been announced.

Bloomberg-linked reports say AI infrastructure spending is driving divergent results across semiconductors and software. Samsung’s semiconductor division profit rose more than 250-fold on AI memory demand, while Qualcomm forecast weaker profits tied to smartphone weakness. Hon Hai sales rose 54% on AI server demand, and Cloudflare raised its outlook. IBM cut guidance; Palantir, SAP, and Shopify reported stronger AI or cloud-related metrics.

ServiceNow (NOW) shares rebounded after a first-half selloff tied to investor concerns about AI agents disrupting enterprise software and margin pressure. The stock rose 57.4% from its $81.24 low. In Q2, subscription revenue was $3.975B (+23% YoY constant currency) and RPO was $13.2B, with 98% renewals and accelerating AI ACV.

Reuters reports Silver Lake is in potential acquisition talks for Workday. Workday shares rose nearly 18% on Thursday after the report, valuing the company at over $51 billion. Analysts said a buyout at a substantial premium could support software valuations amid AI disruption fears and follow strong earnings from peers like ServiceNow and others.

Cybersecurity firms Hudson Rock and CloudSEK say a March 2026 supply-chain attack tied to LiteLLM exposed about 2,500 organizations. A 153GB archive linked to the TeamPCP campaign contained 433,909 files and 118,829 CI runner dumps. LiteLLM versions 1.82.7 and 1.82.8 were live briefly before PyPI quarantined them, but stolen credentials may remain valid until rotated, according to the reports.

Researchers at Reco say “City-Forum” attacks are targeting data stored in Salesforce and ServiceNow systems, exposing user information. Reco links the campaign to extortion group ShinyHunters based on similarities, noting a new UI-API entry point and custom tooling. The attackers also target a ServiceNow Service Portal search endpoint.

The article argues that AI durability may favor software firms that connect data to real-world execution, highlighting Palantir, ServiceNow, and Toast. It cites Palantir revenue of $1.93B and EPS 41c, ServiceNow Q2 revenue $3.99B and AI ACV over $1B, and Toast annualized recurring run-rate $2.4B and 9,500 net locations.

Two threat-intel firms report expanded victim data from a March 2026 LiteLLM supply-chain attack. CloudSEK estimates 2,500+ organisations and about 434,000 CI/CD pipelines exposed, while Hudson Rock attributes 118,829 CI runner dumps to 2,488 corporate domains. Backdoored LiteLLM 1.82.7/1.82.8 were published on PyPI for ~40 minutes via a compromised Trivy release process. Reported payload SANDCLOCK stole cloud, CI/CD and AI API credentials.

Security firm Reco says an ongoing “City-Forum” campaign uses a single server (IP 158.220.87.79, Contabo) to steal data exposed to anonymous users via Salesforce Experience Cloud and ServiceNow customer portals. Reco reports rising activity, heavy Salesforce Aura enumeration, some Lightning Web Runtime GraphQL abuse, and ServiceNow portal search endpoint abuse. No Salesforce/ServiceNow vulnerability is cited; misconfigured guest access is blamed.