Aaron C.’s Post

The SECOND big piece of news today for those that saw my previous post, is that I've simultaneously released new ServiceNow research that shows exactly why you need AppOmni AgentGuard. This research was alluded to in a security advisory sent out by ServiceNow in an email just two days ago. In my latest article, I discuss a net new and novel attack vector that takes advantage of ServiceNow's agent-to-agent discovery mechanism to escalate second-order prompt injection attacks. In essence, I was able to manipulate a simplistic AI agent to effectively recruit more 'powerful' agents on its team to fulfil a malicious task that it was not able to complete itself. This can be viewed as not only a privilege escalation of the user, but in a sense, a privilege escalation of the AI agent too. Read more about this attack vector here: https://lnkd.in/e7pB7S6K #ai #saas #servicenow #cybersecurity #research