SALESFORCE, SERVICENOW DATA TARGETED IN ‘CITY-FORUM' ATTACKS

Summary from the TLDR IT newsletter

Researchers identified a new campaign targeting data stored in Salesforce and ServiceNow environments through their UI/API layers rather than traditional infrastructure exploits. The attackers have also been probing a little-documented native ServiceNow Service Portal search endpoint, highlighting the growing risk around authenticated SaaS access and APIs.