Virtual Agent API — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• ServiceNow Data Breach Exposes Customer Data via API Vulnerability

  ServiceNow confirmed a data breach on June 9, 2026, after attackers exploited an unauthenticated API endpoint, allowing access to sensitive customer data. The vulnerability, found in the endpoint…

  18 articles · Updated June 10, 2026
• Critical AI Security Flaw in ServiceNow Leads to User Impersonation Risk

  AppOmni identified a critical security vulnerability in ServiceNow's AI platform that could allow unauthenticated users to impersonate legitimate users and perform unauthorized actions. The flaw, designated…

  7 articles · Updated January 14, 2026
• BodySnatcher Vulnerability Enables ServiceNow User Impersonation

  A critical vulnerability named 'BodySnatcher' has been identified in ServiceNow's Virtual Agent API and Now Assist AI Agents application, allowing attackers to impersonate any ServiceNow user. This flaw poses…

  2 articles · Updated January 19, 2026

Recent Intelligence Reports

• ServiceNow data breach: security issue gives attacker access — Cybernews · June 10, 2026
• BodySnatcher Vulnerability Allows Attackers to Impersonate Any ServiceNow User — Cyberpress · January 19, 2026
• AppOmni Uncovers Agentic AI Security Flaw in ServiceNow — Cxtoday · January 14, 2026
• ServiceNow patches critical AI platform flaw that could allow user impersonation — Cyberscoop · January 13, 2026

Related Entities