Posts

Showing posts from June, 2023

MOVEit software Vulnerability exploit

Image
VULNERABLE SOFTWARE MOVEIT EXPLOITED BY HACKERS   Hackers take advantage of  a software flaw also known as  CVE-2023-34362  in MOVEit transfer software , a widely used software to transfer  files safely via the internet .  CVE-2023-34362  is  as a zero day vulnerability , in simple terms a software flaw that is only known to the attackers ,the vendors have no knowledge about its presence hence no effort has been made to fix it . The vulnerability is further  explained to be a structured query language (SQL) injection which permits unauthenticated access to the  database .    With this ,the hackers managed to gain access to the database of MOVEit software and stole personal information of the  users .Though the extent of damage has not been stated yet but  numerous business  , schools even government agencies in the United States have been  have been a victim to  the attack .The picture below shows the v...