tldrdailynews.com logo

Zero-day vulnerability in MOVEit Transfer tool exploited in data theft attacks.

1 min read
Source: BleepingComputer
Zero-day vulnerability in MOVEit Transfer tool exploited in data theft attacks.
Photo: BleepingComputer
TL;DR

Hackers are exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software to steal data from organizations. The flaw is a SQL injection vulnerability that leads to remote code execution and does not currently have a CVE assigned to it. Cybersecurity firm Rapid7 says that the MOVEit Transfer flaw is a SQL injection vulnerability that leads to remote code execution and does not currently have a CVE assigned to it. The attacks started over the long US Memorial Day holiday when fewer staff were monitoring systems.

Topics:technologycybersecurity#cybersecurity#data-theft#exploitation#moveit-transfer#vulnerability#zero-day
Share this article
  1. New MOVEit Transfer zero-day mass-exploited in data theft attacks  BleepingComputer
  2. Experts warn of MOVEit Transfer tool exploitation using zero-day bug  The Record by Recorded Future
  3. Critical zero-day vulnerability in MOVEit Transfer exploited by attackers!  Help Net Security
  4. View Full Coverage on Google News

Want the full story? Read the original reporting

Read on BleepingComputer