MOVEit Transfer zero-day: Cl0p mass data theft ยท updates https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 Cl0p (Lace Tempest) exploited an unauthenticated SQL injection in Progress MOVEit Transfer as a zero-day, stealing files from thousands of organisations through their managed file transfer servers. Progress shipped three rounds of fixes in June 2023 as more SQL injection bugs were found. en Fri, 16 Jun 2023 00:00:00 GMT MOVEit Transfer zero-day: Cl0p mass data theft: Third round of fixes for CVE-2023-35708 after a public proof of concept https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023#2023-06-16-ec914ec4 Fri, 16 Jun 2023 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-35708">Source</a></p> MOVEit Transfer zero-day: Cl0p mass data theft: Progress fixes more SQL injection bugs found during code review (CVE-2023-35036) https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023#2023-06-09-f68075df Fri, 09 Jun 2023 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-35036">Source</a></p> MOVEit Transfer zero-day: Cl0p mass data theft: CISA and FBI publish joint advisory AA23-158A attributing the campaign to the Cl0p ransomware gang (TA505) https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023#2023-06-07-68537a47 Wed, 07 Jun 2023 00:00:00 GMT critical <p><a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a">Source</a></p> MOVEit Transfer zero-day: Cl0p mass data theft: CISA adds CVE-2023-34362 to the KEV catalog https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023#2023-06-02-eb8602c2 Fri, 02 Jun 2023 00:00:00 GMT critical <p>MOVEit Transfer zero-day: Cl0p mass data theft: CISA adds CVE-2023-34362 to the KEV catalog</p> MOVEit Transfer zero-day: Cl0p mass data theft: Progress discloses the critical MOVEit Transfer vulnerability and ships patches https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023#2023-05-31-d4d5160e Wed, 31 May 2023 00:00:00 GMT critical <p><a href="https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023">Source</a></p> MOVEit Transfer zero-day: Cl0p mass data theft: Earliest exploitation of the MOVEit Transfer zero-day seen by Mandiant https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023 https://pwn.watch/i/moveit-transfer-cl0p-mass-exploitation-2023#2023-05-27-86275e09 Sat, 27 May 2023 00:00:00 GMT critical <p><a href="https://cloud.google.com/blog/topics/threat-intelligence/zero-day-moveit-data-theft">Source</a></p>