Update 6/10/26: Added details below from a new ServiceNow advisory regarding the observed activity and bug bounty submissions. ServiceNow is warning about a security incident after attackers exploited ...

ServiceNow says security researchers were behind activity linked to a newly patched authentication flaw, but the company continues to investigate potential exposure. ServiceNow is notifying customers ...

Stealthy City-Forum attacks use a custom toolset to exploit guest access and extract exposed data from Salesforce and ServiceNow environments.

Enterprise security teams are auditing logs and rotating credentials this week after ServiceNow confirmed that attackers successfully queried sensitive customer instance data through an ...

Cloud technology giant ServiceNow has notified some of its customers that a software bug on its platform was allowing anyone on the internet to access their data. According to a report in TechCrunch, ...

Update 8/14: Added statement from ServiceNow. An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer ...