Massive Data Theft: Hackers Exploit Zero-Day in Popular File Transfer Tool.

Hackers are exploiting a newly discovered vulnerability in Ipswitch's MOVEit Transfer managed file transfer (MFT) software to launch mass data exfiltration attacks. The vulnerability could lead to escalated privileges and potential unauthorized access to the environment. The affected software is used by thousands of organizations around the world, and more than 2,500 MOVEit Transfer servers are discoverable on the internet. Security researchers have observed evidence of exploitation and data theft from at least four separate incidents. Progress has urged users to disable internet traffic to their MOVEit Transfer environment and apply the necessary updates.