Microsoft Warns of Ransomware Attacks Exploiting Critical GoAnywhere Bug

TL;DR
A critical vulnerability in Fortra's GoAnywhere MFT (CVE-2025-10035) has been exploited by the cybercrime group Storm-1175 in Medusa ransomware attacks since September 2025, leading to widespread compromises and urging organizations to update their systems to prevent further damage.
Topics:technologycybersecurity#cve-2025-10035#cybersecurity#exploitation#goanywhere-mft#medusa-ransomware#storm-1175
- Microsoft: Critical GoAnywhere bug exploited in ransomware attacks BleepingComputer
- Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability Microsoft
- Medusa ransomware used during exploitation of GoAnywhere file transfer bug, Microsoft says The Record from Recorded Future News
- Microsoft Links ‘Active Exploitation’ Of GoAnywhere To Cybercrime Group CRN Magazine
Want the full story? Read the original reporting
Read on BleepingComputer