Five weeks after the mass MOVEit breach, new vulnerabilities in the file transfer tool are coming to light as the Clop cyber crime collective continues to terrorise victims. But has the gang bitten off more than it can chew? Experts from Sophos and Mandiant weigh in