Avast, Norton Parent Latest Victim of MOVEit Data Breach Attacks

Gen Digital, the parent company of the security companies, is the latest victim in a rash of Cl0p attacks on the bug in the MOVEit transfer software, leading to employee data being revealed.

Gen Digital, the parent company of cybersecurity subsidiaries such as Avast and Norton, confirmed on June 20 that the personal information of its employees was compromised in yet another a MOVEit attack by the Cl0p ransomware gang.
The company stated that it was affected by a cyberattack
in response to inquiries
, confirming that personal information such as names, addresses, employee IDs, and email addresses were revealed.
We use MOVEit for file transfers and have remediated all of the known vulnerabilities in the system. When we learned of this matter, we acted immediately to protect our environment and investigate the potential impact. We have confirmed that there was no impact to our core IT systems and our services and that no customer or partner data has been exposed, according to Gen Digitals public notice, which further confirmed that it informed all parties that may have been affected, as well as data protection regulators.
The bug, a critical-severity SQL injection tracked as
CVE-2023-34362
, started out as a zero-day vulnerability that has been part of an exploitation campaign at the hands of
Cl0p ransomware gang
. The attacks are ongoing even post-patch, and has targeted more than 100
companies and organizations
so far.
As a general best practice, we advise never to directly allow for apps like MOVEit Transfer to be directly exposed to the Internet in cloud environments, said Amitai Cohen, attack vector intel lead at Wiz, in an emailed statement. Instead, place the app behind a VPN, a reverse proxy or a single sign-on (SSO) landing page. This strategy will help to mitigate the effect of potential attacks exploiting vulnerable or misconfigured application endpoints and other attacks that are similar in nature.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Avast, Norton Parent Latest Victim of MOVEit Data Breach Attacks