Lawrence Abrams / BleepingComputer:
ServiceNow says attackers exploited a flaw, patched on June 5, that let unauthenticated users query data from customer instances, but gives few other details — ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint …
