Jun 16, 2023
0 new incidents, 2 with updates.
Updated
- ClosedPatched
MOVEit Transfer zero-day: Cl0p mass data theft
Cl0p (Lace Tempest) exploited an unauthenticated SQL injection in Progress MOVEit Transfer as a zero-day, stealing files from thousands of organisations through their managed file transfer servers. Progress shipped three rounds of fixes in June 2023 as more SQL injection bugs were found.
Progress MOVEit TransferClosed Jun 16, 2023
- ClosedPatched
Storm-0558: stolen Microsoft signing key used to read government email
China-based Storm-0558 used a stolen Microsoft consumer (MSA) signing key, plus a token validation bug, to forge tokens and read Exchange Online and Outlook.com mail at about 25 organisations, including US government agencies. Microsoft later said the key leaked through a 2021 crash dump.
Microsoft Exchange Online / Outlook.com (Azure AD and MSA token signing)Closed Sep 6, 2023
