Affected orgs already being extorted
https://www.bleepingcomputer.com/news/security/moveit-transfer-customers-warned-of-new-flaw-as-poc-info-surfaces/
Progress warned MOVEit Transfer customers to restrict all HTTP access to their environments after info on a new SQL injection (SQLi) vulnerability was shared online today.
A patch addressing this new critical security bug is not yet available, but one is currently being tested and will be released "shortly," according to the company.