MOVEit Transfer Vulnerabilities Uncovered - Urgent Patch Required.
TL;DR
Progress Software has released patches to address new SQL injection vulnerabilities affecting MOVEit Transfer that could allow an attacker to gain unauthorized access to the database and steal sensitive information. Cybersecurity firm Huntress discovered and reported the vulnerabilities, and the flaws have been addressed in the latest versions of the service. The Cl0p ransomware gang has been exploiting a previously reported vulnerability in MOVEit Transfer to drop web shells on targeted systems and has issued an extortion notice to affected companies.
Topics:businesscybersecurity#cl0p-ransomware-gang#cybersecurity#data-theft#moveit-transfer#patch#sql-injection-vulnerabilities
- New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now! The Hacker News
- The Week in Ransomware - June 9th 2023 - It’s Clop... Again! BleepingComputer
- Brand-New Security Bugs Affect All MOVEit Transfer Versions DARKReading
- Progress issues new patch for MOVEit Transfer after more vulnerabilities found SC Media
- New MOVEit Transfer critical flaws found after security audit, patch now BleepingComputer
Want the full story? Read the original reporting
Read on The Hacker News