Sony Breached Via MOVEit Zero-Day Vulnerability
- С сайта: Zero-Day(cybersecuritynews.com)
- Вернуться к списку новостей
С сайта: Zero-Day(cybersecuritynews.com)
Sony Interactive Entertainment (SIE) discloses a cybersecurity breach caused by the exploitation of a zero-day vulnerability in Progress Software’s MOVEit Transfer platform.
Nearly 6791 current and former workers or members of their families who reside in the United States were impacted by the data breach, which includes some personal information.
The Cl0p ransomware group, a criminal organization with ties to Russia, claimed responsibility for carrying out the attack. The group allegedly took data from Sony in June.
CL0P #ransomware group added Sony Group (https://t.co/gWitcpMi4s), a Japanese multinational conglomerate corporation to their victim list. #Japan @SonyGroupGlobal#clop #darkweb #databreach #cyberrisk https://t.co/K61asq3o3E pic.twitter.com/JOnfhSdaPF
— FalconFeedsio (@FalconFeedsio) June 22, 2023
Insights of the Sony’s Cybersecurity Breach
According to the Data breach notice, Progress Software, which is utilized by SIE and countless other businesses worldwide, disclosed a newly identified vulnerability in its MOVEit file transfer platform on May 31, 2023.
📁🄳🄾🄲🅄🄼🄴🄽🅃
Before Progress Software disclosed the flaw, the company said theywere made aware of it on May 28, 2023; an unauthorized actor used the flaw to obtain certain SIE files kept on its MOVEit platform.
The company found the unauthorized downloads on June 2, 2023, promptly took the platform offline, and fixed the issue. After that, an inquiry was started with support from outside cybersecurity professionals. Law enforcement was also informed.
“This event was limited to Progress Software’s MOVEit Transfer platform and did not impact any of our other systems”, reads the notice.
The particular information involved in the breach was censored in the notice. In addition to rapidly patching the vulnerability, SIE has improved system monitoring and is taking additional precautions to lower the likelihood of a future cyber incident of this nature.
SIE is also providing free Equifax Complete Premier credit monitoring and identity restoration services to recipients.
Victims of MOVEit Attack
Following accusations on hacker forums that Sony had experienced another security breach and that 3.14 GB of data had been taken from the business’s servers, the corporation replied by stating that it was looking into the allegations. In the last four months, Sony has been the victim of two security breaches.
The MOVEit attacks exposed the clients of several renowned organisations. For example, TD Ameritrade, a US stockbroker, stated that over 60,000 of its clients had their bank account data stolen by Cl0p.
Data breaches involving private student information have occurred as a result of the MOVEit vulnerability, which has impacted over 900 schools in the United States.
American Airlines, TJX off-price department stores, TomTom, Pioneer Electronics, Autozone, Johns Hopkins University, and Health System are among the other organizations that have been cited as victims.
In July 2023, the Cl0p ransomware grouptook the unusual action of releasing data stolen through this vulnerability on its Clearnet website rather than assigning it to the dark web. On their website, they mention several victims, including Sony.
Recommendation
It is wise to routinely check and monitor your account statements and credit history for any indications of unauthorized transactions or activity to protect yourself against identity theft and fraud risks.
You can get in touch with your local law enforcement if you ever think you may be a victim of fraud or identity theft.
#Cyber_Security_News #Vulnerability #Zero-Day #Sony_Hacked #Vulnerabilities #Zero_day
Оригинальная версия на сайте:
Sony Breached Via MOVEit Zero-Day Vulnerability
Author: GuruSony Interactive Entertainment (SIE) discloses a cybersecurity breach caused by the exploitation of a zero-day vulnerability in Progress Software’s MOVEit Transfer platform.
Nearly 6791 current and former workers or members of their families who reside in the United States were impacted by the data breach, which includes some personal information.
The Cl0p ransomware group, a criminal organization with ties to Russia, claimed responsibility for carrying out the attack. The group allegedly took data from Sony in June.
CL0P #ransomware group added Sony Group (https://t.co/gWitcpMi4s), a Japanese multinational conglomerate corporation to their victim list. #Japan @SonyGroupGlobal#clop #darkweb #databreach #cyberrisk https://t.co/K61asq3o3E pic.twitter.com/JOnfhSdaPF
— FalconFeedsio (@FalconFeedsio) June 22, 2023
Insights of the Sony’s Cybersecurity Breach
According to the Data breach notice, Progress Software, which is utilized by SIE and countless other businesses worldwide, disclosed a newly identified vulnerability in its MOVEit file transfer platform on May 31, 2023.
📁🄳🄾🄲🅄🄼🄴🄽🅃
Before Progress Software disclosed the flaw, the company said theywere made aware of it on May 28, 2023; an unauthorized actor used the flaw to obtain certain SIE files kept on its MOVEit platform.
The company found the unauthorized downloads on June 2, 2023, promptly took the platform offline, and fixed the issue. After that, an inquiry was started with support from outside cybersecurity professionals. Law enforcement was also informed.
“This event was limited to Progress Software’s MOVEit Transfer platform and did not impact any of our other systems”, reads the notice.
The particular information involved in the breach was censored in the notice. In addition to rapidly patching the vulnerability, SIE has improved system monitoring and is taking additional precautions to lower the likelihood of a future cyber incident of this nature.
SIE is also providing free Equifax Complete Premier credit monitoring and identity restoration services to recipients.
Victims of MOVEit Attack
Following accusations on hacker forums that Sony had experienced another security breach and that 3.14 GB of data had been taken from the business’s servers, the corporation replied by stating that it was looking into the allegations. In the last four months, Sony has been the victim of two security breaches.
The MOVEit attacks exposed the clients of several renowned organisations. For example, TD Ameritrade, a US stockbroker, stated that over 60,000 of its clients had their bank account data stolen by Cl0p.
Data breaches involving private student information have occurred as a result of the MOVEit vulnerability, which has impacted over 900 schools in the United States.
American Airlines, TJX off-price department stores, TomTom, Pioneer Electronics, Autozone, Johns Hopkins University, and Health System are among the other organizations that have been cited as victims.
In July 2023, the Cl0p ransomware grouptook the unusual action of releasing data stolen through this vulnerability on its Clearnet website rather than assigning it to the dark web. On their website, they mention several victims, including Sony.
Recommendation
It is wise to routinely check and monitor your account statements and credit history for any indications of unauthorized transactions or activity to protect yourself against identity theft and fraud risks.
You can get in touch with your local law enforcement if you ever think you may be a victim of fraud or identity theft.
#Cyber_Security_News #Vulnerability #Zero-Day #Sony_Hacked #Vulnerabilities #Zero_day
Оригинальная версия на сайте:
