GoAnywhere Flaw: Fortra Scrambles as Ransomware Storm Brews
Fortra’s investigation into CVE-2025-10035, a critical GoAnywhere MFT flaw, revealed active exploitation and unauthorized activity. The vulnerability affects only those whose admin console is exposed online. Hackers have been using it to deploy ransomware. Fortra recommends restricting internet access to the console, enabling monitoring, and keeping software updated.
Hot Take:
Who knew that the real “GoAnywhere” was actually the admin console’s open door to the public internet? Move over, “open sesame,” because the new magic words are CVE-2025-10035. We just hope Fortra’s hotfix doesn’t need a fix for its own hot mess!
Key Points:
- Fortra discovered a critical security flaw, CVE-2025-10035, in its GoAnywhere MFT software.
- The vulnerability has been actively exploited since September 11, 2025.
- Affected users had their admin consoles exposed to the public internet.
- Threat actors exploited the flaw to deploy Medusa ransomware according to Microsoft findings.
- Fortra released a hotfix and advised users to restrict internet access to admin consoles.
Already a member? Log in here