ServiceNow tacked agentic AI onto a largely unguarded legacy chatbot, exposing customers' data and connected systems.