HomeCII/OTMOVEit Vulnerability Results in Data Breaches at AMC Theatres and Discovery Channel

MOVEit Vulnerability Results in Data Breaches at AMC Theatres and Discovery Channel

Published on

spot_img

In the latest update on the ongoing MOVEit data breaches, the infamous Cl0p ransomware group has announced another victim: AMC Theatres. This news comes in conjunction with the group’s claim of a data breach at Discovery Network. The cybercriminals have been exploiting a vulnerability in Progress Software’s widely used MOVEit transfer application, causing significant disruptions to various organizations.

Multiple companies have fallen victim to the MOVEit data breaches, resulting in the compromise of sensitive customer and employee information. To gather more information on these alleged breaches, The Cyber Express reached out to both AMC Theatres and Discovery Network. However, as of now, no official statements or confirmations have been received from either company.

According to threat analyst Brett Callow, the impact of these data breaches extends far beyond just AMC Theatres and Discovery Network. The number of victims affected by the MOVEit vulnerability has been rapidly increasing, with over 300 organizations and a staggering 18,154,787 individuals impacted at the time of writing. AMC Theatres and Discovery Network are just two examples of the major corporations targeted by the Cl0p ransomware group in the US, UK, and around the world.

Progress Software, the parent company responsible for the MOVEit transfer application, has recently acknowledged that their product has been targeted in a large-scale cyber attack. In a statement released on July 5th, Progress Software addressed the ongoing vulnerability in MOVEit and introduced a new Service Pack program for all MOVEit transfer application products. This program aims to provide customers with regular and predictable product updates and scheduled fixes, based on valuable feedback received.

The initial Service Pack has already been released and includes essential product and security fixes for supported versions of MOVEit transfer application. Additionally, MOVEit Cloud has also implemented this Service Pack, with plans to include MOVEit Automation in future releases. Notable enhancements in this release focus on improving the MOVEit transfer application database, optimizing the installer, and resolving three new Common Vulnerabilities and Exposures (CVEs). Moving forward, Progress Software intends to release a new Service Pack approximately every two months, ensuring customers stay up-to-date with the latest releases, service packs, and hotfixes through the MOVEit Product Hub.

It is important to note that the information provided in this report is based on internal and external research obtained through various means. Users are responsible for their reliance on this information, and The Cyber Express assumes no liability for the accuracy or consequences of its use.

In conclusion, the Cl0p ransomware group’s exploitation of the MOVEit transfer application vulnerability has resulted in multiple data breaches, with AMC Theatres and Discovery Network being the latest victims. The number of organizations affected continues to rise, highlighting the urgent need for companies to prioritize cybersecurity measures and stay vigilant against cyber threats. Progress Software’s introduction of the Service Pack program aims to address product and security issues more efficiently and ensure customers have access to the latest updates and fixes. However, the fight against cybercrime remains an ongoing battle that requires continuous efforts from both software providers and organizations.

Source link

Latest articles

MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors

 The Iranian threat actor known as MuddyWater has been attributed to a spear-phishing campaign targeting...

Meta denies viral claims about data breach affecting 17.5 million Instagram users, but change your password anyway

 Millions of Instagram users panicked over sudden password reset emails and claims that...

E-commerce platform breach exposes nearly 34 million customers’ data

 South Korea's largest online retailer, Coupang, has apologised for a massive data breach...

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

 Fortinet on Wednesday said it observed "recent abuse" of a five-year-old security flaw in FortiOS...

More like this

MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors

 The Iranian threat actor known as MuddyWater has been attributed to a spear-phishing campaign targeting...

Meta denies viral claims about data breach affecting 17.5 million Instagram users, but change your password anyway

 Millions of Instagram users panicked over sudden password reset emails and claims that...

E-commerce platform breach exposes nearly 34 million customers’ data

 South Korea's largest online retailer, Coupang, has apologised for a massive data breach...