Bloomberg BNN reports that details of a new zero-day vulnerability impacting Progress Software’s MOVEit Transfer file transfer app that had been disclosed by an ethical hacker and exploit writer to Huntress Senior Researcher John Hammond had been inadvertently exposed by the exploit writer on Twitter. Information regarding the zero-day which has been discovered following the emergence of two others, one of which has been actively exploited by the Clop ransomware operation was sought to be removed on Twitter by Hammond but has already circulated on Slack, prompting Hammond to notify Progress, which has released a fix the following day.
Source: SC Magazine