The Agentic Blast Radius: What ServiceNow’s BodySnatcher Reveals About AI Agent Security

An attacker sitting halfway across the globe, armed only with a target’s email address and a hardcoded token, can hijack a Fortune 500’s ServiceNow AI agents. No credentials. No MFA bypass exploit. Just API requests and a conversational command: “Create…








