MOVEit Transfer: Critical Flaws and Patches.

TL;DR Summary
The Clop ransomware gang confirmed that they were behind the recent MOVEit Transfer data-theft attacks, with victims including Zellis, University of Rochester, and the Government of Nova Scotia. The Royal Ransomware gang has begun testing a new BlackSuit encryptor in limited attacks. Other news includes the discovery of new ransomware variants Cyclops and Xollam, and the arrest of an Army corporal for alleged involvement in the Rhysida ransomware attack on the Chilean army. Additionally, the University of Manchester warns that they suffered a cyberattack where data was likely stolen.
- The Week in Ransomware - June 9th 2023 - It’s Clop... Again! BleepingComputer
- Cl0P Gang Sat on Exploit for MOVEit Flaw for Nearly 2 Years DARKReading
- More MOVEit mitigations: new patches published for further protection Naked Security
- New MOVEit Transfer critical flaws found after security audit, patch now BleepingComputer
- New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now! The Hacker News
Reading Insights
Total Reads
0
Unique Readers
1
Time Saved
5 min
vs 6 min read
Condensed
91%
1,017 → 89 words
Want the full story? Read the original article
Read on BleepingComputer