Security News ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation TheHackerNews Daniel Bender 13 Jan 2026 ServiceNow fixed CVE-2025-12420, a critical flaw that let unauthenticated attackers impersonate users on its AI Platform.