Progress Software's MOVEit Transfer is facing active exploitation of a critical security flaw, CVE-2024-5806, which allows authentication bypass. The vulnerability was disclosed on Tuesday, and exploit attempts began shortly after, according to Shadowserver researchers. Cybersecurity experts are urging users to update their systems immediately to protect against potential attacks. Additionally, Progress disclosed two new vulnerabilities in MOVEit products.
Progress Discloses Two New Vulnerabilities in MOVEit Products https://t.co/MKyrzJWWja
MOVEit Transfer Seeing Exploit Attempts Via New Critical Vulnerability: Researchers: https://t.co/H8f6Lg9rBJ Progress disclosed the authentication bypass vulnerability Tuesday and “very shortly after” began seeing attempted exploits, according to @Shadowserver researchers.
New MOVEit Transfer Vulnerability Under Active Exploitation - Patch ASAP!: https://t.co/eBDQpnNWFz by The Hacker News #infosec #cybersecurity #technology #news