MOVEit Transfer Flaws Push Security Defense Into a Race With Attackers

Progress Software disclosed critical authentication-bypass vulnerabilities in MOVEit Transfer and MOVEit Gateway (CVE-2024-5806, CVE-2024-5805). Patches are available but a public PoC, active scanning, and early exploit attempts (ShadowServer and Censys observations, ~2,700 exposed instances) increase the risk; organizations are urged to apply patches and additional mitigations (block public RDP, restrict outbound transfers) to reduce exposure.