Security News > 2023 > October > Security researchers believe mass exploitation attempts against WS_FTP have begun
Security researchers have spotted what they believe to be a "Possible mass exploitation" of vulnerabilities in Progress Software's WS FTP Server.
Researchers at Rapid7 began noticing evidence of exploitation on 30 September across multiple instances of WS FTP. Progress released fixes for eight separate vulnerabilities in WS FTP on Wednesday, including one rated a maximum score of 10 on the CVSS severity scale.
After analyzing the exploit chain, researchers concluded that the process appeared to be uniform across all the incidents they were alerted to, which could potentially indicate a cyber crim is attempting a mass-scale exploitation attempt of vulnerable WS FTP instances.
Rapid7 stressed the importance of upgrading to the latest version of WS FTP as soon as possible, which comes with the required updates to address the security issues that affect a wide range of previous versions of the software.
The issues affecting WS FTP are the latest in what has been a challenging year for the software firm behind the product.
As a result of the mass exploitation of MOVEit Transfer, Progress is facing a swathe of lawsuits because of the attacks which are still ongoing months after they began in June.
News URL
https://go.theregister.com/feed/www.theregister.com/2023/10/02/ws_ftp_update/
Related news
- Cybersecurity Researchers Warn of New Rust-Based Splinter Post-Exploitation Tool (source)
- Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries (source)
- WeChat devs introduced security flaws when they modded TLS, say researchers (source)
- Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers (source)
- Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security (source)
- Germany drafts law to protect researchers who find security flaws (source)