ServiceNow fixes API issue after reports of suspicious tenant activity

ServiceNow is notifying customers after discovering and remediating a vulnerability that could have exposed data via an unauthenticated API endpoint on affected instances. The issue emerged publicly after customers began discussing security notifications from ServiceNow and reports of suspicious activity linked to their environments. According to the company’s advisory , the vulnerability was initially reported through ServiceNow’s bug bounty program in April, prompting an investigation and subs