Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?
Progress Software’s MOVEit Transfer Hit by Major Security Flaw: Exploits Already in the Wild
A critical security flaw in Progress Software MOVEit Transfer, CVE-2024-5806, is already being exploited. This authentication bypass vulnerability could allow attackers to impersonate any user. Users must update to the latest versions to avoid risks.
Hot Take:
Progress Software just put the “MOVE” in MOVEit Transfer, but unfortunately, it’s hackers who are doing the moving…into your systems!
Key Points:
- Newly disclosed flaw CVE-2024-5806 affects multiple versions of MOVEit Transfer.
- Vulnerability allows authentication bypass, enabling attackers to impersonate users.
- Another critical flaw CVE-2024-5805 also affects MOVEit Gateway.
- Researchers highlight vulnerabilities in both Progress MOVEit and IPWorks SSH library.
- Approximately 2,700 MOVEit Transfer instances online, primarily in the U.S. and Europe.
Already a member? Log in here