ServiceNow discloses security incident exposing customer data

ServiceNow discloses a security incident where attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query customer data.