ServiceNow confirmed attackers exploited an unauthenticated API flaw to access customer data before a June 5 patch, the third ...