Loading story…
ServiceNow, in partnership with Nvidia, has announced the release of Apriel 2.0, an open-source AI language model designed to support enterprise needs for custom agent development and enhanced security. Built on Nvidia’s Nemotron framework, Apriel 2.0 is engineered to deliver reasoning and accuracy comparable to much larger models while operating on less hardware, and it supports multimodal inputs such as text, images, and diagrams. The model is positioned for use in regulated industries like financial services, healthcare, and telecommunications, and is integrated with ServiceNow’s AI Platform to allow organizations to maintain existing data governance and compliance policies.
Apriel 2.0 will run within ServiceNow’s secure, compliance-certified infrastructure and is targeted at enterprises seeking to deploy autonomous agents with robust security and regulatory requirements. The model is also integrated with Nvidia’s AI Factory for Government, supporting FedRAMP-compliant workflows for public sector modernization. Despite the announcement, ServiceNow has not provided performance benchmarks or inference cost comparisons for Apriel 2.0, but the company cites industry forecasts predicting increased adoption of smaller, context-specific models over general-purpose large language models in the coming years.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
ServiceNow said it plans to integrate its workflow software with Nvidia's AI Factory for Government to support FedRAMP-compliant workflows and public sector modernization. The company stated both the integration and Apriel 2.0 are expected to reach production by Q1 2026.
ServiceNow announced Apriel 2.0, an updated open-source language model built on Nvidia's Nemotron framework for regulated industries including financial services, healthcare, and telecommunications. The company said the model is designed for stronger reasoning, multimodal input support, and lower hardware requirements for enterprise autonomous agents.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Nvidia launched the **Open Agent Safety Platform**, combining the open-source `OpenShell` 0.1.0 agent runtime with optional **Sentry** monitoring and enforcement on BlueField-4 DPUs. OpenShell is designed to constrain AI agents from testing through production using kernel-isolated sandboxes, supervised network access, protected API-key handling, logging, deterministic policy enforcement, and optional formal verification of policies. Sentry provides a hardware-separated control layer that can independently inspect activity, attest telemetry, verify agent identities, apply zero-trust network policies, and quarantine agents that violate policy even if their host has been compromised. Nvidia positioned the platform as a response to reported agent sandbox escapes, unauthorized system access, and inaccurate activity reporting; it identified Anthropic, SpaceXAI, Salesforce, and SAP as partners or adopters and said more than 100 organizations are working with its related technologies.
Oct 1, 2026
ServiceNow is reportedly in advanced negotiations to acquire Veza, an identity security startup, for over $1 billion. The potential acquisition aims to address a critical need for unified control over AI agents and the data they access within enterprise environments. Veza’s technology specializes in mapping permissions across various enterprise systems, providing visibility into which users, applications, and AI agents have access to specific data, thereby strengthening governance and security for non-human identities. This move follows ServiceNow’s earlier $2.85 billion acquisition of Moveworks, which added AI assistants and enterprise search capabilities to its platform. By integrating Veza, ServiceNow seeks to provide a robust identity security layer to govern the expanding use of AI agents across IT, HR, customer service, and security operations. The acquisition is expected to help enterprises ensure that AI agents’ permissions align with security policies, mitigating risks associated with autonomous machine actions in business processes.
Jun 29, 2026
Organizations across industries are rapidly adopting agentic AI, with a significant shift in 2025 from experimental deployments to operational use in security operations. Companies are leveraging AI agents for tasks such as autonomous alert triage, threat hunting, and intelligent detection tuning, resulting in increased efficiency and productivity. However, this rapid adoption has highlighted the need for robust governance, observability, and lifecycle management to prevent potential risks associated with autonomous agents running unchecked. Regulated industries like financial services are leading in implementing centralized governance and human oversight to ensure regulatory, ethical, and performance standards are met. Enterprises are also benefiting from advancements in AI models, such as Claude 4.5 and GPT-5, which offer improved reasoning and integration capabilities. Despite these advancements, organizations are still working to balance human and agent decision-making, emphasizing the importance of continuous monitoring and responsible deployment of AI agents in critical security operations.
Jun 29, 2026