Project

MOVEit Transfer

MOVEit Transfer is Progress Software's managed file transfer product, used by organizations to securely exchange files, now a frequent target of exploits.

Known aliases

MOVEit

Current stories

investConfirmed3 publishers

Kiteworks asks customers to power down for nine hours to guard against zero-day attacks

Kiteworks told customers to shut its file-transfer servers for nine hours this weekend after a federal warning. The company says its current release fixes every known flaw, so the outage guards against one it does not know about.

Publishers:einpresswire.com heise.de techcrunch.com

Perspective Coverage

3 publishers

Builder: Builder 12%
Operator: Operator 63%
Investor: Investor 25%

Reality

Evidence60
Adoption50
Hype gap+25
Incentives65
Confidence55

securityConfirmed4 publishers

SickKids blames a third-party app for its breach, then declines to name it

The Toronto hospital says the flaw sits in software used by other organizations too. It has not said which software, which leaves those organizations nothing to act on.

Publishers:bleepingcomputer.com sickkids.ca therecord.media toronto.citynews.ca

Perspective Coverage

4 publishers

Builder: Builder 15%
Operator: Operator 73%
Investor: Investor 12%

Reality

Evidence50
Adoption: Not scored
Hype gap+5
Incentives60
Confidence60

securityConfirmed6 publishers

CenterPoint confirms a customer data theft it learned about from a dark web post

CenterPoint Energy's 8-K says an unauthorized party took customer personal information through an external-facing system. The person selling the file says it came out of a public API with no rate limiting.

Publishers:bleepingcomputer.com helpnetsecurity.com securityaffairs.com securityweek.com thecyberexpress.com therecord.media

Perspective Coverage

6 publishers

Builder: Builder 25%
Operator: Operator 54%
Investor: Investor 21%

Reality

Evidence60
Adoption: Not scored
Hype gap+20
Incentives65
Confidence60

securityOne report1 publisher

Clop asks ShinyHunters to come online from the leak site ShinyHunters defaced

For two days ShinyHunters published eight-figure demands on Clop's onion address and served Salesforce data through it. On September 21 a short message attributed to Clop appeared there instead, asking for contact.

Publishers:hackread.com

Reality

Evidence55
Adoption35
Hype gap+8
Incentives78
Confidence55

productOne report1 publisher

ShinyHunters says a Grav upload flaw got it inside Cl0p's leak site

BleepingComputer confirmed a defaced page and an uploaded file on Cl0p's infrastructure. Everything past that is a criminal crew's own inventory, and the route it describes runs through the content layer.

Publishers:thenextweb.com

Reality

Evidence40
Adoption30
Hype gap+15
Incentives82
Confidence45