Skip to content

Internet security research and reporting

CVE-2023-34362

Technical coverage, source documents and official vulnerability records.

FISRO coverage

Read the relevant deployment conditions, remediation steps and limits of the evidence in the linked material.

2 Jun 2023

Analysis · Retrospective 2023

MOVEit: patching the transfer server did not settle the data exposure question

The 2023 campaign separated two jobs that incident tickets often collapse: closing the vulnerability and investigating earlier access.

Sources from this coverage

Zero-Day Vulnerability in MOVEit Transfer Exploited for Data TheftMandiant / Google Cloud
AA23-158A: CL0P Ransomware Gang Exploits MOVEit VulnerabilityFBI and CISA
Active Exploitation of Zero-Day Vulnerability in MOVEit TransferCyber Security Agency of Singapore
MOVEit Transfer May 2023 response and revision historyProgress Software