In a significant development that underscores the lasting impact of 2023’s MOVEit vulnerability, Amazon has confirmed that employee data was compromised through a third-party property management vendor.
The breach, revealed by a threat actor known as “Nam3L3ss,” exposes the continuing ripple effects of one of last year’s most devastating supply chain attacks. The compromise stems from the notorious MOVEit Transfer vulnerability, CVE-2023-34362, a critical SQL injection flaw that allowed unauthenticated attackers to gain unauthorized access to vulnerable systems.
Read more…
Source: Forbes News