ServiceNow discloses a data exposure incident affecting customers

ServiceNow reported a security incident in which an unauthenticated access flaw in a vulnerable API endpoint was used to query data from customer instances. The company said the issue primarily affected customers running the Australia platform release or customers on older releases who had made certain configuration changes. In a later advisory, ServiceNow said it believed the observed activity was likely associated with security researchers or customer-led research rather than malicious threat actors.