Today, @vulncheck released new research revealing that 99% of ProjectSend instances are still vulnerable to a critical vulnerability that has been publicly known for over a year. More on how attackers are exploiting this vulnerability here: https://vulncheck.com/blog/projectsend-exploited-itw