MOVEit maker announces new critical vulnerability affecting a different file transfer tool
The Record
|
Contributed by: Bill Russell
Summary
Progress Software discloses vulnerabilities in WS_FTP Server, urging immediate patching. Notably exploited MOVEit developer now faces potential backlash and lawsuits over exploitations. Eight vulnerabilities affect all WS_FTP Server versions, hotfixes provided. Severe issues CVE-2023-40044 and CVE-2023-42657 remediated by full installer upgrade. Clop ransomware gang previously exploited vulnerabilities in MOVEit and others, exposing sensitive data of tens of millions. File transfer tools remain key hacker targets.
