MOVEit Transfer: Auth bypass and a look at exposure

**Executive Summary:** Progress Software disclosed two authentication-bypass vulnerabilities in MOVEit Transfer and Gateway (CVE-2024-5806 and CVE-2024-5805), one of which received a CVSS score of 9.1; Censys observed ~2,700 publicly reachable MOVEit instances (primarily in the US) and published dashboards to track exposure, noting similarity to the 2023 exposure footprint and reminding organizations of the significant risk given prior mass exploitation by the Clop ransomware gang.