Second-order prompt injection can turn AI into a malicious insider

Security researchers found a way to abuse ServiceNow’s Now Assist platform