TechCrunch

NOVEMBER 9, 2023

In a statement published Thursday, the Maine government said hackers exploited a vulnerability in its MOVEit file-transfer system, which stored sensitive data on state residents. The hackers used […] © 2023 TechCrunch. All rights reserved. For personal use only.

Government 324

Government Data System Software 324

TechCrunch

DECEMBER 27, 2023

This year, 2023, was a hell of a year for data breaches, much like the year before it (and the year before that, etc.).

Data 294

Data Tools Organization 294

Thorn Tech

JULY 4, 2023

Our support team at Thorn Technologies has been fielding questions about the MOVEit file transfer web application recently, with customers asking whether SFTP Gateway is affected by the recent MOVEit vulnerability.

Applications 52

Applications Technology 52

InfoWorld

MARCH 14, 2024

We saw multiple high-profile incidents, such as the discovery of a far-reaching zero-day vulnerability in the MOVEit file transfer server application and a rise in attackers targeting cloud credentials for lateral movement. 2023 was an eventful year for cloud security.

Cloud 79

Cloud Trends Storage DevOps 79

InfoWorld

JANUARY 30, 2024

Last year’s MOVEit and 3CX vulnerabilities offered a stark reminder of the risk software supply chain attacks pose today. Threat actors exploit vulnerabilities to infiltrate a software provider’s network and modify the software’s original functionality with malicious code.

Software 87

Software Network Applications Data 87

TechCrunch

AUGUST 19, 2023

Americans’ health records stolen: Millions of Americans had their sensitive medical and health information stolen after hackers exploited a zero-day vulnerability in the widely used MOVEit file transfer software raided systems operated by tech giant IBM.

Technical Review 246

Technical Review Software Review Systems Review Social 246

Tenable

OCTOBER 2, 2023

Concerns due to exploitation of critical flaw in Progress Software’s MOVEit Transfer In late May, a zero-day vulnerability in Progress Software’s MOVEit Transfer secure managed file transfer (MFT) software was exploited by the CL0P ransomware group and has resulted in the compromise of over 2,000 organizations according to researchers at Emsisoft.

Software Review 121

Software Review Software Systems Review Authentication 121

Perficient

JANUARY 11, 2024

Right now, it’s located in a cloud share location, which is managed by a third-party tool called “MoveIT.” ” MoveIT serves as a file-sharing interface through which we can transfer or modify the necessary files. We now download the files from the cloud file share and delete them from MoveIT.

Performance 52

Performance Cloud Construction Compliance 52

Symantec

JUNE 12, 2023

Symantec products guard against exploitation of vulnerabilities that are being actively exploited by cyber-crime actors.

52

52

Tenable

AUGUST 25, 2023

For the second consecutive month, the surge was driven by the CL0P ransomware gang’s exploitation of vulnerabilities in Progress Software’s MOVEit Transfer product. government crafts plans to boost the security of open source software (OSS), it’s seeking comments from the public on how to best accomplish its goals.

Malware 98

Malware Artificial Inteligence Open Source Artificial Intelligence 98

Tenable

DECEMBER 29, 2023

Targeting of a zero-day vulnerability in MOVEit Transfer – a secure managed file transfer (MFT) software made by Progress Software – was just the beginning. We'll continue to see these groups target zero-days and n-days in order to claim as many victims as possible.

Software Review 75

Software Review Development Team Review Systems Review Weak Development Team 75

Tenable

JUNE 23, 2023

1 – Wanted: Feds offer $10 million reward for CL0P info The CL0P ransomware gang lately has been making hay out of the MOVEit Transfer vulnerabilities, so it's no surprise it's drawn the attention of law enforcement. Dive into six things that are top of mind for the week ending June 23. This week, the U.S. critical infrastructure.

Cloud 53

Cloud Systems Review Data Disaster Recovery 53

Tenable

OCTOBER 6, 2023

After two record months for ransomware attacks, the fall in attacks in August was to be expected,” Matt Hull, Global Head of Threat Intelligence at NCC Group, said in the report , adding that CL0P’s MOVEit attacks “somewhat inflated” the June and July numbers. To get more details, read the full report.

Budget 65

Budget Report Survey Open Source 65

Tenable

MARCH 29, 2024

The alert was prompted by the SQLi vulnerabilities that Progress Software disclosed in its MOVEit Transfer product last year. One of the bugs was exploited in the wild by the CL0P ransomware gang.

Systems Review 65

Systems Review Weak Development Team Banking System 65

Cloudera

DECEMBER 1, 2023

This summer’s MOVEit data breach has impacted over 2,600 organizations and 70,500,000 people worldwide, including Maximus (11 million), the state of Maine (1.3 First and foremost, security is paramount when it comes to AI in the public sector. million), among others.

Data 105

Data Government Artificial Intelligence Artificial Inteligence 105

Coveros

FEBRUARY 26, 2024

MoveIT What happened: This widespread attack targeted the MOVEit file transfer software used by numerous organizations. How it happened: A critical vulnerability in the MOVEit software allowed attackers to gain access to servers and deploy ransomware. Known victim organizations crossed the 1,000 milestone.

Software Review 52

Software Review Technical Review Open Source Weak Development Team 52

Tenable

FEBRUARY 9, 2024

The dip in 2022 was “an anomaly, not a trend,” which Chainalysis attributes to one-time factors such as many ransomware gangs’ decision to shift their activities to the Russia-Ukraine war; and the FBI’s timely provision of decryption keys to Hive ransomware victims.

Weak Development Team 66

Weak Development Team Infrastructure Generative AI Artificial Inteligence 66

Tenable

JANUARY 23, 2024

The Cl0p ransomware group has consistently targeted file transfer solutions as part of their ransomware campaigns over the last three years including several flaws in Accellion’s File Transfer Appliance (FTA) in late 2020/early 2021, CVE-2023-0669 in Fortra’s GoAnywhere MFT in January 2023 and CVE-2023-34362 in Progress Software’s MOVEit Secure MFT (..)

Authentication 62

Authentication Research Groups Analysis 62

Tenable

SEPTEMBER 15, 2023

For more information about ransomware: “ Ransomware Protection: How to Prevent Ransomware Attacks ” (eSecurity Planet) “ The complete guide to ransomware ” (TechTarget) “ Stop Ransomware Guide” (CISA) “ Ransomware Preparedness: Why Organizations Should Plan for Ransomware Attacks Like Disasters ” (Tenable) VIDEO Anatomy of a Threat: MOVEIt (Tenable) (..)

Open Source 113

Open Source Systems Review System Software Review 113

Lacework

FEBRUARY 7, 2024

Additionally, Mandiant observed the financially-motivated threat group FIN11 conducting two significant campaigns that exploited zero-day vulnerabilities in managed file transfer software from Fortra and MOVEit, leading to data theft and extortion operations that impacted hundreds of organizations in the first half of 2023.

Weak Development Team 109

Weak Development Team Malware Cloud Internet 109

Tenable

NOVEMBER 17, 2023

For more information about recent ransomware trends and incidents: “ Ransomware Attacks Are on the Rise, Again ” (Wired) “ Healthcare giant McLaren reveals data on 2.2

Artificial Intelligence 61

Artificial Intelligence Artificial Inteligence Government Storage 61

Ivanti

AUGUST 8, 2023

Coveware’s July 2023 Quarterly Report is tracking the Average Ransom Payment at $740k (+126% from Q1 2023) and attributes this spike to the massive MOVEit campaign executed by CloP impacting over 1000 companies.

.Net 52

.Net Software Review Malware Trends 52

Tenable

OCTOBER 27, 2023

For more information about recent ransomware incidents and trends, check out these Tenable resources: “ CVE-2023-20269: Zero-Day Vulnerability in Cisco Adaptive Security Appliance and Firepower Threat Defense Reportedly Exploited by Ransomware Groups ” (blog) “ FAQ for MOVEit Transfer Vulnerabilities and CL0P Ransomware Gang ” (blog) “ FBI and CISA (..)

Artificial Inteligence 63

Artificial Inteligence Artificial Intelligence Technical Review Backup 63

Tenable

SEPTEMBER 22, 2023

Other ransomware insights from the report include: The number of ransomware attacks in the U.S.

Insurance 70

Insurance Trends IoT Software Review 70

TechCrunch

AUGUST 18, 2023

Data security is important, as we are reminded when millions of Americans had their health data stolen after MOVEit hackers targeted this little-known company called IBM. Keeping half an eye on what the cybercriminals are up to might help keep their shenanigans front of mind.

Technical Review 217

Technical Review Media Real Estate Software Review 217

Tenable

SEPTEMBER 20, 2023

Since then, organizations have observed the havoc critical unpatched vulnerabilities like Log4Shell and MOVEit can create. They’ve also expanded their technological footprint (from employees’ homes to the cloud) while new types of threats and vulnerabilities continue to emerge.

Research 117

Research Report Generative AI Programming 117

O'Reilly Media - Ideas

SEPTEMBER 5, 2023

A retrospective on this year’s MoveIT attack draws some important conclusions about protecting your assets. PoW is disabled most of the time, but when traffic seems unusually high, it can switch on, forcing users to “prove” their humanness (actually, their willingness to perform work).

Trends 90

Trends Artificial Inteligence ChatGPT Weak Development Team 90

Tenable

FEBRUARY 23, 2024

government has released a fact sheet with security measures these facilities should take as soon as possible.

Artificial Inteligence 66

Artificial Inteligence Artificial Intelligence Generative AI ChatGPT 66

Tenable

JULY 28, 2023

5 – NCC Group: Ransomware attacks on the upswing Ransomware attacks spiked in June, climbing a whopping 221% year-on-year, an increase driven in part by the CL0P ransomware gang’s exploitation of vulnerabilities in Progress Software’s MOVEit Transfer product. To get more details, download the report. 14%) and newcomer 8base (9%).

Company 52

Company Technical Review Artificial Inteligence Systems Review 52

Tenable

JUNE 30, 2023

NCSC) VIDEO Anatomy of a Threat: MOVEIt (Tenable) 5 – CSA’s top cloud IAM challenges The Cloud Security Alliance’s Identity and Access Management Working Group has ranked the top 10 challenges in cloud identity and access management.

Security 98

Security ChatGPT Artificial Intelligence Artificial Inteligence 98