Accellion Mess News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Security researchers have identified two vulnerabilities in the Joomla content management system that can be chained together for complete compromise of the

In Wake of Breaches, Accellion Faces at Least 14 Lawsuits May 5, 2021 HealthInfoSec) • April 7, 2021     Get Permission At least 14 lawsuits seeking class-action status have been filed against Accellion in the wake of breaches that exploited zero-day flaws in the vendor's 20-year-old File Transfer Appliance. A motion to consolidate the cases has also been filed. Outdated Product A lawsuit against Accellion and one of its clients, the supermarket chain Kroger, notes that "key people within Accellion have acknowledg...

Get Permission Some Accellion data breach victims have subsequently been extorted, with those not paying seeing their data publicly released by the Clop ransomware gang. This is that group's website. Software company Accellion has released preliminary findings around the security incident that has stung some customers that used its 20-year-old File Transfer Appliance. The company says that fewer than 100 customers have been attacked as the result of four now-patched vulnerabilities in the FTA, and that fewer than 25 "appear to have suffered significant data theft," according to a news relea...

BankInfoSecurity May 5, 2021 Compliance Compliance Twitter Get Permission PayPal has patched a cross-site scripting - or XSS - vulnerability in its currency conversion endpoint that, if exploited, could enable malicious JavaScript injection. The PayPal vulnerability was discovered in February 2020 by a security researcher who goes by the name Cr33pb0y, who was paid $2,900 as part of HackerOne's bug bounty program. Responding in the HackerOne forum, PayPal notes the vulnerability resulted in its currency conversion URL improperly handling user input. An attacker exploiting the vulnerability ...

GovInfoSecurity Twitter Get Permission New Zealand's Reserve Bank is one victim of a breach involving Accellion's FTA product. (Source: Wikimedia Commons) Several data breaches stemming from unpatched vulnerabilities in Accellion's File Transfer Appliance have been revealed. What went wrong? Where does the fault lie? And what can organizations do about it? It’s not a straightforward story, and it points to problems around balancing use of an aging software product with risk, a reluctance to move onto a newer platform and internal patching hiccups. It’s prudent for those still using Acce...