"Critical Auth Bypass Exploit for Fortra GoAnywhere MFT Requires Immediate Patching"

TL;DR
An exploit has been released for a critical authentication bypass vulnerability in Fortra's GoAnywhere MFT software, allowing attackers to create new admin users on unpatched instances. While Fortra silently patched the bug in December, a technical analysis and proof-of-concept exploit have now been published, raising concerns about potential attacks. This comes after the Clop ransomware gang breached over 100 organizations by exploiting a different flaw in the same software, highlighting the ongoing threat to MFT platforms from cybercriminals.
Topics:technologycybersecurity#clop-ransomware#cybersecurity#exploit#fortra#goanywhere-mft#vulnerability
- Exploit released for Fortra GoAnywhere MFT auth bypass bug BleepingComputer
- Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin The Hacker News
- Watch out, a new critical flaw affects Fortra GoAnywhere MFT Security Affairs
- Fortra warns of new critical GoAnywhere MFT auth bypass, patch now BleepingComputer
Want the full story? Read the original reporting
Read on BleepingComputer