SERVICENOW AI AGENTS CAN BE TRICKED INTO ACTING AGAINST EACH OTHER VIA SECOND-ORDER PROMPTS

Summary from the TLDR InfoSec newsletter

ServiceNow's Now Assist AI agents can be manipulated through second-order prompt injection, where instructions passed between agents trigger unintended actions. Attackers can use this to escalate privileges, steal data, or redirect workflows. ServiceNow claims the behavior matches expected agent chaining, but organizations are urged to monitor agent interactions and harden guardrails.