Zero-day MOVEit Transfer vulnerability exploited in the wild, heavily targeting North America

The Cybersecurity & Infrastructure Security Agency has issued an alert about the use of a zero-day vulnerability in MOVEit software.Exploitation of this zero-day SQL injection vulnerability in the wild has been observed, mainly targeting North America and including attacks from the ransomware threat actor Lace Tempest.

Read at TechRepublic