{"id":45638,"date":"2022-03-09T16:46:32","date_gmt":"2022-03-09T16:46:32","guid":{"rendered":"http:\/\/d8bb8593-5dfc-42cc-8353-85d645083d75"},"modified":"2022-03-09T16:46:32","modified_gmt":"2022-03-09T16:46:32","slug":"servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/","title":{"rendered":"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/2cd0028ee4de959e90468b4281a38c25d4fb695e\/2020\/09\/30\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\" class=\"ff-og-image-inserted\"><\/div>\n<p>ServiceNow has <a href=\"https:\/\/support.servicenow.com\/kb?id=kb_article_view&amp;sysparm_article=KB1095978\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">published guidance<\/a> for its customers related to Access Control List (ACL) misconfigurations after an AppOmni security report found that 70% of the instances they tested had the issue.&nbsp;<\/p>\n<div class=\"relatedContent alignRight\">\n<h3 class=\"heading\"> <span class=\"int\">Enterprise Software<\/span> <\/h3>\n<\/p><\/div>\n<p>In a report <a href=\"https:\/\/www.businesswire.com\/news\/home\/20220309005387\/en\/Major-Security-Misconfiguration-Impacting-ServiceNow-Instances-Discovered\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">released<\/a> on Wednesday, AppOmni explained that the common misconfigurations come from a &#8220;combination of customer-managed ServiceNow ACL configurations and overprovisioning of permissions to guest users.&#8221;<\/p>\n<p>A ServiceNow spokesperson told <em>ZDNet<\/em> that this is a &#8220;well-known&#8221; issue that happens when end users do not apply recommended configuration and governance controls to their SaaS platforms.&nbsp;<\/p>\n<p>&#8220;ServiceNow regularly publishes security configuration and best practice guidance to help our customers. We recommend that customers continuously monitor their security settings and user permissions to ensure that their instances are configured as intended, with an emphasis on permission levels for external users,&#8221; the spokesperson said.&nbsp;<\/p>\n<p>AppOmni said many major SaaS platforms have this issue because of how complex they are and noted that misconfigurations can happen during the initial implementation phase of a SaaS platform when users or settings change or as part of the regular cadence of SaaS updates that can impact current configurations.<\/p>\n<p>AppOmni CEO Brendan O&#8217;Connor said securing SaaS is a lot more complicated than just checking a handful of settings or enabling strong authentication for users.<\/p>\n<p>&#8220;SaaS platforms have become business operating systems because they are so flexible and powerful. There are many valid reasons for workloads and applications running on a SaaS platform to communicate externally, such as to integrate with emails and text messages or host a support portal for your customers,&#8221; O&#8217;Connor said. &nbsp;<\/p>\n<p>&#8220;SaaS adoption skyrocketed during the pandemic, but unfortunately, investments in people, processes, and technology to secure and monitor SaaS has not kept up. In AppOmni&#8217;s experience, significant data exposures like this are far more common than customers realize.&#8221;<\/p>\n<p>Many companies use Role-Based Access Control (RBAC) as a way to grant permissions for users to access resources on a SaaS platform, and the challenge, according to AppOmni, is ensuring the right level of access when organizations update or customize SaaS applications or onboard new users.&nbsp;<\/p>\n<p>AppOmni Offensive Security Researcher Aaron Costello <a href=\"https:\/\/cts.businesswire.com\/ct\/CT?id=smartlink&amp;url=https%3A%2F%2Fappomni.com%2Fresources%2Faolabs%2Fappomni-discovers-security-misconfiguration-impacting-servicenow%2F&amp;esheet=52592254&amp;newsitemid=20220309005387&amp;lan=en-US&amp;anchor=AO+Labs+Technical+Paper&amp;index=2&amp;md5=3efcbc07e73220a4ae089d667c23ff83\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">said<\/a> ServiceNow external interfaces exposed to the public could allow a malicious actor to extract data from records.<\/p>\n<p>&#8220;The high degree of flexibility in modern SaaS platforms has made misconfiguration one of the largest security risks businesses currently face,&#8221; said Brian Soby, CTO of AppOmni.<\/p>\n<p>&#8220;Our goal is to shed light on common misconfigurations and other potential risks in SaaS platforms so users can ensure their system posture and configuration matches their business intent.&#8221;<\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AppOmni said 70% of the ServiceNow instances they tested had an Access Control List misconfiguration.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-45638","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-09T16:46:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/2cd0028ee4de959e90468b4281a38c25d4fb695e\/2020\/09\/30\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence\",\"datePublished\":\"2022-03-09T16:46:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/\"},\"wordCount\":445,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2cd0028ee4de959e90468b4281a38c25d4fb695e\\\/2020\\\/09\\\/30\\\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\\\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/\",\"name\":\"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2cd0028ee4de959e90468b4281a38c25d4fb695e\\\/2020\\\/09\\\/30\\\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\\\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"datePublished\":\"2022-03-09T16:46:32+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2cd0028ee4de959e90468b4281a38c25d4fb695e\\\/2020\\\/09\\\/30\\\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\\\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2cd0028ee4de959e90468b4281a38c25d4fb695e\\\/2020\\\/09\\\/30\\\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\\\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/","og_locale":"en_US","og_type":"article","og_title":"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-03-09T16:46:32+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/2cd0028ee4de959e90468b4281a38c25d4fb695e\/2020\/09\/30\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence","datePublished":"2022-03-09T16:46:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/"},"wordCount":445,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/2cd0028ee4de959e90468b4281a38c25d4fb695e\/2020\/09\/30\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/","url":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/","name":"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/2cd0028ee4de959e90468b4281a38c25d4fb695e\/2020\/09\/30\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","datePublished":"2022-03-09T16:46:32+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/2cd0028ee4de959e90468b4281a38c25d4fb695e\/2020\/09\/30\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/2cd0028ee4de959e90468b4281a38c25d4fb695e\/2020\/09\/30\/73b39f93-2d9f-41b9-bcf6-193cd79be8d3\/servicenow-hrpath.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/servicenow-releases-guidance-on-access-control-list-misconfigurations-after-report-highlights-prevalence\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/45638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=45638"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/45638\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=45638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=45638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=45638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}