CISA: CRITICAL SERVICENOW VULNERABILITIES BEING TARGETED BY HACKERS

Summary from the TLDR InfoSec newsletter

CISA and several security companies are warning that two ServiceNow vulnerabilities that were reported by AssetNote on July 11 are being actively exploited. The vulnerabilities allow attackers to access databases and exfiltrate data as well as read arbitrary files. Researchers warn of between 13k to 42k vulnerable ServiceNow instances ranging across the private and public sectors.