CVE-2023-36934 2

Threat Brief - MOVEit Transfer SQL Injection Vulnerabilities: CVE-2023-34362, CVE-2023-35036 and CVE-2023-35708 (Updated Oct 4)

Cyber Risks Unit 42 Palo Alto Networks

Progress Software alerted customers on May 31 to a critical SQL injection vulnerability, CVE-2023-34362, in its MOVEit Transfer managed file transfer product, followed by additional critical SQLi disclosures CVE-2023-35036 and CVE-2023-35708 on June 9 and...

Vulnerabilities & Patching

Surge in MOVEit Transfer Scanning Activity Could Signal Emerging Threat Activity

Cyber Risks GreyNoise Blog

GreyNoise observed scanning of MOVEit Transfer systems jump from fewer than 10 IPs per day to over 100 on May 27, 2025, then 319 on May 28, with daily volume staying intermittently between 200 and 300 IPs afterward. Low-volume exploitation attempts on June...