🌐 Deep Dark Web Weekly Highlights in June W3

 Vulnerability: MOVEit 

Significant vulnerabilities have been identified in the widely adopted file transfer software MOVEit, commonly used in businesses. It is imperative for software users to exercise heightened vigilance and promptly apply the necessary patches to mitigate risks.

✓ MOVEit: File transfer software developed by Progress Software in the United States, designed to facilitate secure and efficient external file transfers. Renowned for its widespread adoption, MOVEit is utilized by over 1,700 companies and boasts a user base of 3.5 million individuals globally. The vulnerabilities, identified as CVE-2023-34362 and CVE-2023-35036, pose a significant risk across all versions of MOVEit. Exploitation of these vulnerabilities can lead to unauthorized access and potential compromise of both managed files within the software and, in severe cases, control over the internal network.

 Confidential Leak:Israel Government 

S2W has recently identified a Telegram channel specializing in the unauthorized disclosure of data from Israel. This channel is sharing the personal information of employees from the Israeli Defense Ministry free of charge. The Telegram channel in question appears to have been established in late April. Since then, it has come to light that numerous data leaks have occurred, including private Israeli websites, personal information of citizens, and election-related databases, all of which are being freely disseminated.

 Personal Information Leak: Vietnam

Detailed personal information of Vietnamese citizens has been leaked and is being sold on Russian dark web hacking forums. On June 13, a post was discovered on the Russian dark web hacking forum XSS, offering for sale the personal information of Vietnamese citizens. The seller provided a sample of the leaked data in the post, revealing name, date of birth, contact details, address, resident registration number, account number and so on.

If you want to subscribe to <DDW Weekly Highlights> newsletter, please follow this LinkedIn channel or contact us.