He came to solve all our problems with AI, but in the end, it could be the biggest problem of all

A new study has revealed that malicious actors can exploit the default settings of ServiceNow’s generative artificial intelligence platform, Now Assist, allowing them to carry out command injection attacks. This type of attack, known as second-order injection, relies on the discovery capability among Now Assist agents, facilitating access to sensitive data and unauthorized modification of records. AI against AI Aaron Costello, head of Security Research at AppOmni, warned that the behavior enabling these types of abuses is not a flaw in artificial intelligence, […]

A new study has revealed that malicious actors can exploit the default settings of ServiceNow’s Now Assist generative artificial intelligence platform, allowing them to carry out command injection attacks. This type of attack, known as second-order injection, relies on the discovery capability among Now Assist agents, facilitating access to sensitive data and unauthorized modification of records.

AI against AI

Aaron Costello, Head of SaaS Security Research at AppOmni, warned that the behavior that allows for these types of abuses is not a flaw in artificial intelligence, but an expected feature of certain configuration options. “When agents can discover and recruit each other, an apparently harmless request can turn into an attack, putting sensitive information at risk,” Costello noted.

The architecture of Now Assist allows a benign agent to process requests composed of carefully designed commands, thereby recruiting more powerful agents that can alter records or copy corporate data. What is concerning is that these malicious actions can be carried out in the background, making them difficult to detect by the affected organizations.

To mitigate these risks, experts suggest implementing a supervised execution mode for privileged agents, disabling the autonomous override property, and segmenting the functions of agents by team. Additionally, it is recommended to conduct continuous monitoring of the behavior of artificial intelligence agents to identify any suspicious activity.

ServiceNow has acknowledged the findings and, while it has stated that the functionality was intentionally designed this way, it has updated its documentation to provide greater clarity on security configurations. If organizations using Now Assist do not carefully review their settings, they could already be at risk, Costello warned.

The new Coca-Cola ad made with AI: Genius or a joke?

Coca-Cola has recently launched a Christmas advertisement that has been generated by artificial intelligence, a move that has sparked intense debate about authenticity and the value of content in the digital age. In the latest episode of the podcast Behind the Numbers, this topic was analyzed with industry experts, who discussed whether this innovation represents a bold step into the future or if it is simply a soulless shortcut for advertising campaigns. The episode features Suzy Davidkhanian, Vice President of Content, as well as analysts Sky Canaves and Arielle Feger

Coca-Cola has recently launched a Christmas advertisement that has been generated by artificial intelligence, a move that has sparked intense debate about the authenticity and value of content in the digital age. In the latest episode of the Behind the Numbers podcast, this topic was analyzed with industry experts, who discussed whether this innovation represents a bold step into the future or if it is simply a soulless shortcut for advertising campaigns.

Coca-CoIA

The episode features Suzy Davidkhanian, Vice President of Content, as well as analysts Sky Canaves and Arielle Feger. Together, they examined the implications of using artificial intelligence in content creation, especially in such an emotionally and culturally significant context as the holiday season. During the discussion, it was considered whether the ability to generate content easily and quickly can blur the meaning of what is authentic and, consequently, whether authenticity becomes a premium value in the market.

The Coca-Cola announcement has been seen as a tangible example of how brands are beginning to adopt emerging technologies to enhance their marketing strategies. However, the central question that arises from this analysis is: can machines really capture the human and emotional spirit that traditional advertising often seeks to evoke during the holidays?

As more brands begin to explore content generation through algorithms and programs, this discussion about authenticity and its value in the advertising industry is likely to become increasingly relevant. To delve deeper into this debate and gain different perspectives, listeners are invited to subscribe to the podcast on platforms like Apple Podcasts, Spotify, and YouTube.