Security Boulevard

Agents Aren’t People: What the ServiceNow Vulnerability Reveals About Agentic AI Access Control

Enterprise security teams are beginning to encounter a category of access failure that feels unfamiliar only because its consequences arrive faster than expected.  Systems that once required multiple ...
ZDNet

ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence

ServiceNow has published guidance for its customers related to Access Control List (ACL) misconfigurations after an AppOmni security report found that 70% of the instances they tested had the issue.
Dark Reading

'Most Severe AI Vulnerability to Date' Hits ServiceNow

ServiceNow tacked agentic AI onto a largely unguarded legacy chatbot, exposing customers' data and connected systems.
The Hacker News

ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation

ServiceNow fixed CVE-2025-12420, a critical flaw that let unauthenticated attackers impersonate users on its AI Platform.
Diginomica

From 'AI platform' to 'AI control tower' - ServiceNow's Veza acquisition reveals identity governance as critical bottleneck for enterprise AI

ServiceNow has today announced that it intends to acquire Veza, a leader in identity security - in a move that signals the vendor's ambitions to further control and govern AI deployments in the ...
Insider Monkey

ServiceNow’s Bet on Veza Points to Tighter AI Identity Controls

ServiceNow, Inc. (NYSE:NOW) is one of the best agentic AI stocks to buy now. On December 2, 2025, ServiceNow said it intends to acquire Veza, an AI-native identity security platform, to expand its ...