Intrusions exploiting critical CrushFTP zero-day underway

Vulnerable CrushFTP file transfer server software instances impacted by a critical virtual file system escape zero-day have been subjected to ongoing targeted attacks that could enable the download of system files, Security Affairs reports.

attacks critical crushftp download enable endpointdevice-security escape exploiting file files file system file transfer network security reports security server software system targeted attacks transfer virtual virtual file system vulnerability management vulnerable zero-day