Product
GoAnywhere MFT
- First Reported
- Jan 8, 2026
- Latest Reported
- Sep 3, 2026
Reported Context (2)
- The same advisory covers an earlier Cl0p campaign against Fortra’s GoAnywhere MFT, launched in late January 2023 against a separate zero-day, CVE-2023-0669. Supply-Chain Attacks Exploit Blind Spots in Vendor Security
- Recent findings include Microsoft’s research on Medusa actors exploiting a vulnerability in Fortra’s GoAnywhere MFT License Servlet (CVE-2025-10035)[4] and Zencec’s report on Medusa’s abuse of flaws in SimpleHelp’s Medusa Ransomware Campaigns Abuse SimpleHelp and Other RMM Tools
CVE (9)
Malware (3)
People (3)
Threat Actors (6)
MITRE ATT&CK (11)
Vendors (8)
Products (20)
Tools (2)
Industries (6)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.