FRESH MOVEIT BUG UNDER ATTACK MERE HOURS AFTER DISCLOSURE

Summary from the TLDR InfoSec newsletter

A new vulnerability affecting the SFTP module of MOVEit's software has been disclosed. With a CVSS score of 7.4, the vulnerability allows attackers to perform a forced authentication attack or upload an SSH public key to impersonate users without authentication. The vulnerability is under active exploitation.