#deserialization-vulnerability

[ follow ]
#cve-2025-10035
Information security
fromTheregister
6 days ago

Microsoft blames Medusa affiliates for GoAnywhere exploits

Medusa-linked attackers exploited a critical deserialization flaw in Fortra's GoAnywhere MFT (CVE-2025-10035) to enable code execution, deploy RMM tools, and maintain persistence.
Information security
fromSecurityWeek
2 weeks ago

Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day

A critical deserialization vulnerability in Fortra GoAnywhere MFT (CVE-2025-10035) was exploited in the wild at least eight days before patches were released.
[ Load more ]