Decryption Digest

CVE Analysis & Threat Intelligence Briefings

In-depth analyses of zero-day vulnerabilities, CVE exploits, ransomware campaigns, and nation-state attack techniques affecting enterprise security. Filter by category, tag, or keyword.

Free daily briefing

Every article here lands in subscribers' inboxes the morning it drops.

Threat intel, active CVEs, and campaign alerts, distilled daily for practitioners. 50,000+ subscribers. No noise.

Free. No spam. Unsubscribe anytime.

Category:

2 results tagged SQL injection

CVE-2023-34362: MOVEit Transfer SQL Injection, CLOP's Mass Data Extortion Campaign

CVE REFERENCEJune 1, 202311 min

CVE-2023-34362 MOVEit: CLOP SQL Injection, 1,000+ Orgs

CVE-2023-34362 is a critical SQL injection vulnerability in Progress MOVEit Transfer that enables unauthenticated remote code execution. Exploited as a zero-day by the CLOP ransomware group beginning May 27, 2023, it was used to breach over 1,000 organizations simultaneously through data exfiltration without encryption. Victims include the US Department of Energy, Shell, British Airways, the BBC, Maximus, and hundreds more.

Eric Bang

Founder & Cybersecurity Evangelist

Read

CVE-2021-27101 Explained: Accellion FTA SQL Injection and the CLOP Ransomware Campaign

CVE REFERENCEJanuary 23, 202110 min

CVE-2021-27101 Accellion FTA: SQL Injection, 100+ Victims

CVE-2021-27101 is a critical SQL injection vulnerability in Accellion FTA (File Transfer Appliance) that allows unauthenticated remote code execution. Exploited by the CLOP ransomware group beginning in December 2020, the vulnerability was used to steal sensitive files from over 100 organizations including government agencies, universities, law firms, and financial institutions, without deploying ransomware encryption.