ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts

Published on November 19, 2025

Malicious actors can exploit default configurations in ServiceNow's Now Assist generative artificial intelligence (AI) platform and leverage its agentic capabilities to conduct prompt injection attacks. The second-order prompt injection, according to AppOmni, makes use of Now Assist's agent-to-agent discovery to execute unauthorized actions, enabling attackers to copy and exfiltrate sensitive

Continue reading on website
Other news

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild

November 19, 2025
Fortinet has warned of a new security flaw in FortiWeb that it said has been exploited in the wild.The medium-severity vulnerability, tracked as CVE-2025-58034, carries a CVSS score of 6.7 out of a maximum of 10.0."An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb may allow an authenticated attacker to execute

‘PlushDaemon’ hackers hijack software updates in supply-chain attacks

November 19, 2025
The China-aligned advanced persistent threat (APT) tracked as 'PlushDaemon' is hijacking software update traffic to deliver malicious payloads to its targets. [...]