Login

News Post

Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

ArstechnicaArstechnica · 4m
Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

A critical vulnerability has been discovered in MOVEit, a widely used file transfer software. The vulnerability, known as CVE-2024-5806, allows attackers to bypass authentication and gain access to sensitive data. Hackers have already started attempting to exploit this vulnerability following its public disclosure. The exploit can be triggered by using a null string as a public encryption key during the authentication process, enabling attackers to assume the identity of any SFTP user and perform malicious actions. Progress Software has released patches to address the vulnerability, and administrators are advised to investigate their systems for vulnerability and take appropriate measures. Last year, a similar vulnerability led to the compromise of numerous organizations.

6
View Source

Comments

More Like this

Actively exploited Cisco 0-day with maximum 10 severity gives full network control

Actively exploited Cisco 0-day with maximum 10 severity gives full network control

Google Releases Chrome Update to Address Actively Exploited Vulnerability

Google Releases Chrome Update to Address Actively Exploited Vulnerability

Roundcube email flaw is being exploited, so patch now, US government warns

Roundcube email flaw is being exploited, so patch now, US government warns

Ivanti warns of critical vulnerability in its popular line of endpoint protection software

Ivanti warns of critical vulnerability in its popular line of endpoint protection software

This popular WordPress site builder has a serious security issue — and hackers are already taking advantage

This popular WordPress site builder has a serious security issue — and hackers are already taking advantage

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Exim vulnerability affecting 1.5 million servers lets attackers attach malicious files

Exim vulnerability affecting 1.5 million servers lets attackers attach malicious files

3D printer users say their devices were hacked to warn of a security flaw

3D printer users say their devices were hacked to warn of a security flaw

Microsoft left internal passwords exposed in latest security blunder

Microsoft left internal passwords exposed in latest security blunder

“This vulnerability is now under mass exploitation.” Citrix Bleed bug bites hard

“This vulnerability is now under mass exploitation.” Citrix Bleed bug bites hard

Download the medial app to read full posts, comements and news.