MOVEit Vulnerabilities Expose Organizations to Cyberattacks

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

Critical SQL Injection vulnerabilities in Progress Software’s MOVEit Transfer product, exploited by Clop ransomware gang since May 2023, led to unauthorized access and data breaches, affecting numerous organizations worldwide. Millions of individuals may have had their data compromised, revealing the scale of the attack through the exploitation of MOVEit Transfer’s vulnerability.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.