Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

The vulnerability, found in the MOVEit SFTP module, can be exploited in at least two attack scenarios. The most powerful attack allows hackers to use a null string as a public encryption key during the authentication process, enabling unauthorized access.

Within hours of the vulnerability becoming publicly known, hackers were already attempting to exploit it, highlighting the urgency for organizations to patch their systems promptly.

Read at Ars Technica