Fortra’s File Fiasco: APTs Thrive as Transparency Takes a Holiday
Security researchers have confirmed threat actors exploited a severe vulnerability in Fortra’s GoAnywhere MFT, criticizing the company’s lack of transparency. Dubbed an “attacker’s playground,” this flaw has been actively exploited, and experts urge Fortra to clarify the situation to help organizations make informed decisions regarding CVE-2025-10035.
Hot Take:
Fortra’s GoAnywhere MFT vulnerability is like a piñata at a hacker’s birthday party—everyone’s taking a swing, and the lack of transparency is just the blindfold! WatchTowr researchers are shaking their heads in disappointment, like parents who just realized the candy was made of broccoli. Fortra, it’s time to spill the beans, or risk being the internet’s least favorite party host.
Key Points:
- WatchTowr slams Fortra’s lack of transparency on GoAnywhere MFT vulnerability CVE-2025-10035.
- The vulnerability is being actively exploited, with attackers already creating backdoor admin accounts.
- Fortra’s “Am I Impacted?” section criticized for being vague and unhelpful.
- Over 20,000 GoAnywhere MFT instances remain exposed to the internet.
- Vulnerability likened to a hacker’s playground, with significant risks for large organizations.
Already a member? Log in here