ServiceNow discloses security incident exposing customer data

ServiceNow disclosed a security incident where attackers exploited an unauthenticated access flaw in a vulnerable API endpoint, enabling them to query data from customer instances. The breach involved unauthorized access to customer data through the compromised API.