MOVEit Transfer Software: Critical Zero-day Being Actively Exploited

Overview Assura’s Security Operations Center is seeing active exploitation of a SQL Injection flaw in Progress Software’s MOVEit Transfer product first announced on May 31, 2023. The vulnerability is CVE-2023-34362. Technical Analysis A full technical analysis has been done by our friends at Huntress, who have been on the forefront of analyzing exploitation of the… Continue reading MOVEit Transfer Software: Critical Zero-day Being Actively Exploited

The post MOVEit Transfer Software: Critical Zero-day Being Actively Exploited appeared first on Assura, Inc. …

actively exploited analysis center critical cve cyber heads-up exploitation exploited flaw friends huntress injection may moveit moveit transfer operations product progress security security operations security operations center software sql sql injection technical technical analysis vulnerability zero-day