Guy Lederfein News Today

Five weeks after the mass MOVEit breach, new vulnerabilities in the file transfer tool are coming to light as the Clop cyber crime collective continues to terrorise victims. But has the gang bitten off more than it can chew? Experts from Sophos and Mandiant weigh in

Database contents could be exposed.

For the third time since the discovery of the MOVEit Transfer application zero-day vulnerability, Progress Software has revealed a new critical SQL injection

Two of the bugs allow for unauthenticated access and modification privileges for MOVEit Transfer database content, while the third would allow an attacker to terminate instances of the application at will. A security bulletin from the company lists all three as critical or high severity.