ServiceNow patches critical vulnerabilities and partners with Wiz

ServiceNow Wiz cloud security vulnerability patching cybersecurity

ServiceNow has patched three critical vulnerabilities, each assigned a CVSS score of 10. These flaws included one allowing unauthenticated data modification in hosted instances, one enabling arbitrary code execution via a GraphQL interface, and another allowing arbitrary SQL commands to modify databases.

In a separate development, Wiz has partnered with ServiceNow to integrate high-fidelity cloud security data into existing ServiceNow workflows. This collaboration aims to help IT and security teams manage the challenges of migrating to the cloud, such as maintaining accurate inventories of ephemeral workloads, triaging security issues within ITSM, and prioritizing vulnerabilities and misconfigurations based on organizational compliance frameworks.

Entities

National Vulnerability Database · ServiceNow · Wiz

Sources

Enhance existing security workflows with high-fidelity cloud security data from Wiz in ServiceNow [cybernoz.com]

7 days ago

This Week In Security: Baked-in Malware, Freezers Not Freezing, Zoom Snoops Clipboards, And AI Makes Things Worse, Faster [hackaday.com]

8 days ago