Progress MoveIt Transfer — Vulnerability Disclosure

Atumcell-discovered weakness in Progress Software's MoveIt Transfer file-transfer product, coordinated with the vendor and publicly disclosed.

Atumcell research surfaced a security weakness in Progress Software's MoveIt Transfer product. The disclosure was coordinated with the vendor and reported in the trade press alongside related findings in Zoho Desk, illustrating the recurring exposure pattern in widely deployed enterprise file-transfer and ITSM software.

Affected: Progress Software (MoveIt Transfer) · Severity: High

Disclosed and published. Full archive entry — link in first comment.

#VulnerabilityDisclosure #InfoSec #Disclosure #Vulnerability #Filetransfer

Tip: Paste into LinkedIn's compose box. Open compose with this URL pre-filled (LinkedIn pulls the OG card automatically).

Full research archive entry: https://matthewcarr.com/research/moveit-transfer-disclosure?utm_source=linkedin&utm_medium=social&utm_campaign=share

Why first-comment-link: LinkedIn's algorithm penalises external links in main posts. Putting the link in the first comment consistently produces 2-3x higher reach than in-post links.

Vulnerability disclosure: Progress MoveIt Transfer — Vulnerability Disclosure
Atumcell-discovered weakness in Progress Software's MoveIt Transfer file-transfer product, coordinated with the vendor and publicly disclosed.
Atumcell research surfaced a security weakness in Progress Software's MoveIt Transfer product. The disclosure was coordinated with the vendor and reported in the trade press alongside related findings in Zoho Desk, illustrating the recurring exposure pattern in widely deployed enterprise file-transfer and ITSM software.
Affected: Progress Software (MoveIt Transfer) · Severity: High
Full entry: https://matthewcarr.com/research/moveit-transfer-disclosure

For when you want to forward to a specific contact (CISO, board-chair friend, journalist) with a personal note.

LinkedIn, Slack, iMessage, Bluesky, and Mastodon will all pull this image automatically when they see the URL. No manual upload needed.