Batten down the hatches, it's time to patch some more MOVEit bugs
ID: 9f129e78-d2ff-5013-85df-974ac80b75bd
STIX ID: report--9f129e78-d2ff-5013-85df-974ac80b75bd
Feed Name: The Register (Security)
Threat Score
Progress Software disclosed two critical MOVEit vulnerabilities (CVE-2024-5806 in MOVEit Transfer and CVE-2024-5805 in MOVEit Gateway) that enable authentication bypass and SFTP user impersonation, potentially allowing attackers to read, write, and delete files; researchers provided detailed exploitation methods and public proofing led to observed attack attempts shortly after disclosure, so organizations running vulnerable versions are strongly advised to patch immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.