We’re Moving Too Fast: Why AI’s Race to Market Is a Security Disaster
ID: 1bc40f5d-bb6b-5817-bc9e-79758dbb63cf
STIX ID: report--1bc40f5d-bb6b-5817-bc9e-79758dbb63cf
Feed Name: Security Boulevard
Threat Score
The article describes CVE-2025-12420 (“BodySnatcher”), a critical (CVSS 9.3) ServiceNow Now Assist vulnerability that lets unauthenticated attackers impersonate administrators (bypassing MFA and SSO) and weaponize AI agents to create privileged backdoor accounts; it warns that agentic AI and insecure MCP integrations massively expand attack surface and urges immediate actions—zero-trust for agents, hardened defaults, defense-in-depth, and agent lifecycle management.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.