Malicious actors can exploit default configurations in ServiceNow's Now Assist generative artificial intelligence (AI) platform and leverage its agentic capabilities to conduct prompt injection attacks. The second-order prompt injection, according to AppOmni, makes use of Now Assist's agent-to-agent discovery to execute unauthorized actions, enabling attackers to copy and exfiltrate sensitive
source https://thehackernews.com/2025/11/servicenow-ai-agents-can-be-tricked.html
Wednesday, November 19, 2025
ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box