
ServiceNow Software Bug Exposed Some Company Data to the Internet
A security bug in ServiceNow software left some customer data accessible on the internet. The company is used by thousands of businesses to manage their operations.
Source
TechCrunch Security
Original headline: ServiceNow tells customers a bug left some of their data exposed to the internet
Plain-English summary by GetCyberRight. Read the full report at the source above.
ServiceNow, a software platform used by thousands of companies to automate their internal business processes, discovered a security bug that left some customer data exposed on the internet. The company has notified affected customers that their data may have been accessed because of this vulnerability. ServiceNow is typically used by businesses to manage things like employee requests, IT help tickets, and internal workflows. This situation affects you if you work for or do business with a company that uses ServiceNow.
Your personal information could have been exposed if your employer uses this software to manage employee data, or if a company you interact with stores your customer information in ServiceNow. The exact type of data exposed depends on how each company was using the software. Some customers had their data accessed, according to ServiceNow's notification. If you think you might be affected, here is what to do:
- Check your email for notifications from your employer or companies you do business with about a ServiceNow data exposure.
- If you receive a notification, read it carefully to understand what specific information was exposed.
- Change your password for any accounts mentioned in the notification.
- Watch your accounts closely for suspicious activity, such as unexpected password reset requests or unauthorized access.
- Enable two factor authentication on any affected accounts if you have not already done so. When companies use third party software to store your data, you have less control over security. Always ask companies about their data security practices, especially when providing sensitive information. Use unique passwords for every account so that if one company has a breach, your other accounts remain secure. Consider using a password manager to keep track of different passwords. Sign up for account notifications and alerts wherever possible so you know immediately if something unusual happens with your information.
Curated from trusted cybersecurity sources by GetCyberRight
Source: TechCrunch SecurityStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Free Cybersecurity Certification Could Open Career Doors for Your Family
ISC2 now offers a completely free, employer-recognized cybersecurity certification with no prerequisites. This could be a career game-changer.
3 min readWhy Federal Patching Rules Matter for Your Home Cybersecurity
CISA's new four-factor vulnerability system changes how agencies prioritize patches. This smarter approach works for families too.
3 min readFree Cybersecurity Certification Now Available for Everyone
ISC2 removed the cost barrier to entry-level cybersecurity certification, offering free training and exams for anyone interested in learning security fundamentals.
3 min readFast Growing Ransomware Gang Targets Businesses Across the Country
A ransomware group called The Gentlemen has become one of the most active threat groups by rapidly recruiting skilled hackers with high payment promises.
2 min read