“A vulnerability in ServiceNow's Assist AI allowed a second-order prompt injection attack, enabling an agent to perform CRUD actions on a database and exfiltrate data via email.”