ServiceNow BodySnatcher vulnerability

Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

This episode is a rapid-fire cybersecurity news roundup covering multiple headlines and what they mean for defenders. The crew debates reports that Chinese firms are dropping U.S. and Israeli security vendors, then pivots into breach fallout, malware activity, and real-world attacker behavior. Along the way, they unpack how geopolitics affects procurement, why supply-chain dependencies make “bans” messy, and what happens when organizations swap tools fast. 

Expect candid takes on ransomware trends, enterprise security operations, and where hype collides with implementation. The hosts also riff on incident response realities, risk management, and what security teams should watch for next—plus plenty of side commentary and humor in between.

Chapters

• (00:00) - PreShow Banter™ — Podcast Banter
• (04:13) - Chinese firms to stop using US and Israeli cybersecurity software - 2026-01-19
• (08:56) - Story # 1: Exclusive: Beijing tells Chinese firms to stop using US and Israeli cybersecurity software, sources say
• (13:42) - Story # 2: Tennessee man to plead guilty to hacking Supreme Court’s electronic case filing system
• (16:25) - Story # 3: Hacker gets seven years for breaching Rotterdam and Antwerp ports
• (18:20) - Story # 4: 33-year-old Dutchman arrested for enableing criminals to test malware for antivirus programs.
• (20:02) - Story # 5: Army to ‘kill NIPR’ at multiple locations in commercial internet experiment
• (27:41) - Story # 6: Hungary grants asylum to former Polish minister implicated in spyware probe
• (29:12) - Story # 7: California orders Elon Musk’s AI company to immediately stop sharing sexual deepfakes
• (41:47) - Story # 8: ServiceNow BodySnatcher flaw highlights risks of rushed AI integrations
• (49:30) - Story # 8b: BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow
• (55:29) - CTF Winners
• (59:19) - ChickenSec: KFC app 'more secure' than Manage My Health, expert claims

ChickenSec: KFC app ‘more secure’ than Manage My Health, expert claims

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com