topic U.S. Federal Agencies, Schools, Hospitals Impacted by Global Hacking Spree in Industry News

U.S. Federal Agencies, Schools, Hospitals Impacted by Global Hacking Spree

AndreaMoore — Fri, 16 Jun 2023 13:18:28 GMT

Several U.S. federal agencies were hit in a global hacking campaign that exploited a vulnerability in a widely used file-transfer software.

https://www.reuters.com/world/us/us-government-agencies-hit-global-cyber-attack-cnn-2023-06-15/

Re: U.S. Federal Agencies, Schools, Hospitals Impacted by Global Hacking Spree

dcontesti — Fri, 16 Jun 2023 19:10:29 GMT

For anyone using the MOVEit transfer system although there is no CVE for it, here is some additional information on the hack does and systems potentially affected by it.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-15June2023

Re: U.S. Federal Agencies, Schools, Hospitals Impacted by Global Hacking Spree

denbesten — Fri, 16 Jun 2023 22:26:34 GMT

CVE-2023-35708 has now been assigned, but is still awaiting CVSS score. Vendor response is "install the just released patch".

Remotely accessible SQL injection attack with risk of data exposure, data loss and privilege escalation. I am anticipating CVSS to be fairly high.