ThreatCluster

Exploitation of ServiceNow AI Assistants Leads to Prompt Injection Attacks

First seen 2 Dec 2025, 18:33 UTC •CyberpressCybersecuritynews •16

Article Content

Browse articles
ThreatCluster

Hackers are exploiting default configurations of ServiceNow AI assistants to execute prompt injection attacks. This vulnerability allows threat actors to manipulate AI agents into performing unauthorized Create, Read, Update, and Delete (CRUD) operations, potentially compromising sensitive data and system integrity.

How this analysis works

Extracted Entities

1 / 2