The only thing new about this is the focus on ServiceNow. These endpoints are all standard in our scanners since almost a year ago.

Honestly, the sheer amount of misconfigured Salesforce instances out there (that I’ve personally seen) is just unconscionable.