Author: Ryann Slone, Senior Marketing Manager, AppOmni

Aaron Costello, chief of security research at AppOmni, highlighted the exploit’s severity, calling it the most severe AI-driven vulnerability to date.

AppOmni, which disclosed the issue, said the flaw lets an attacker use only a victim’s email address to spoof identity.

“Attackers could have effectively ‘remote controlled’ an organization’s AI, weaponizing the very tools meant to simplify the enterprise,” says Costello.

AppOmni, who discovered the flaw, dubbed it “BodySnatcher”.

AppOmni’s research, which led to the vulnerability discovery, also revealed that default settings in ServiceNow’s Now Assist platform could enable second-order prompt…

Aaron Costello, chief of security research at AppOmni, characterized this one as the “most severe AI-driven vulnerability uncovered to date.”

The disclosure comes nearly two months after AppOmni revealed that malicious actors can exploit default configurations in ServiceNow’s Now Assist GenAI platform.