Second-order prompt injection can turn AI into a malicious insider

A representational concept of a social media network.

• AppOmni warns ServiceNow’s Now Assist AI can be abused via “second‑order prompt injection”
• Malicious low‑privileged agents can recruit higher‑privileged ones to exfiltrate sensitive data
• Risk stems from default configurations; mitigations include supervised execution, disabling overrides, and monitoring agents

We’ve all heard of malicious insiders, but have you ever heard of malicious insider AI?