MOVEit’s victims include US government agencies

The US government has fallen victim to a global hacking campaign that exploited a vulnerability in a widely used software, according to the US Cybersecurity and Infrastructure Security Agency (CISA). While the agency acknowledged several federal bodies being targeted, it reassured that the impact is not expected to be significant. CISA’s executive assistant director for cybersecurity, Eric Goldstein, stated that they are actively investigating the breaches and working on timely remediation. The specific agencies affected have not been disclosed, and CISA, the FBI, and the National Security Agency have yet to provide further details on the attacks. CISA Director Jen Easterly mentioned in an interview with MSNBC that the United States does not anticipate any major consequences from the breach. The compromised software, MOVEit, developed by Progress Software, is typically utilized by organizations to facilitate file transfers with their partners and customers. Security experts have expressed concerns about the potential access adversaries could gain through this type of breach. The hacking group Cl0p, which has claimed responsibility for the attack on MOVEit, has previously stated that it will not exploit any data obtained from government agencies. Both Cl0p and Progress Software have not responded to requests for comment at this time.