cyber
confidence high
sentiment negative
materiality 0.40
Progress Software discloses zero-day vulnerability in MOVEit Transfer
PROGRESS SOFTWARE CORP /MA
- On May 28, 2023, Progress learned of unusual activity in MOVEit Transfer, discovering a zero-day vulnerability allowing unauthorized escalated privileges.
- Progress notified customers and took down MOVEit Cloud on May 30, releasing patches for all supported versions on May 31.
- MOVEit Transfer and MOVEit Cloud accounted for less than 4% of Progress' annual gross revenue as of May 31, 2023.
- Progress engaged outside cybersecurity experts and federal law enforcement; does not currently believe the vulnerability will materially impact business or financial results.