Hackers are actively exploiting a maximum severity vulnerability (CVE-2025-10035) in Fortra's GoAnywhere MFT that allows injecting commands remotely without authentication. The vendor disclosed the ...

CVE-2025-10035 in GoAnywhere MFT is being exploited by ransomware group Storm-1175 Vulnerability enables unauthenticated remote code execution; Medusa ransomware was deployed in at least one case ...

A cybercrime group, tracked as Storm-1175, has been actively exploiting a maximum severity GoAnywhere MFT vulnerability in Medusa ransomware attacks for nearly a month. Tracked as CVE-2025-10035, this ...

Researchers warn organizations to immediately upgrade deployments of GoAnywhere MFT due to vulnerabilities that have been exploited in the past by ransomware gangs. Users of Fortra’s GoAnywhere MFT ...

Security researchers have confirmed that threat actors have exploited the maximum-severity vulnerability affecting Fortra's GoAnywhere managed file transfer (MFT), and chastised the vendor for a lack ...

Fortra found - and patched - a new critical bug in the popular MFT solution When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. CVE-2025-10035 is a ...

Fortra, the manufacturer of the widely used GoAnywhere managed file transfer (MFT) tool, has once again found itself at the centre of a gathering cyber storm after Microsoft warned it was tracking ...

There is a critical security gap in the license servlet of GoAnywhere MFT, a file transfer tool for companies. The manufacturer informed customers about the leak a week ago and made patches available.