InfoSecBulletin Cybersecurity for mankind

A critical vulnerability with a perfect 10.0 CVSS score in Fortra’s GoAnywhere Managed File Transfer (MFT) solution was exploited as a zero-day for at least a week before a patch was released. CVE-2025-10035 is a command injection vulnerability enabling remote code execution without authentication. Security firm watchTowr noted evidence of …

Palo Alto Networks, a leading cybersecurity company, recently hosted a significant networking event titled ” Raise the bar on Security with Prisma SASE” with over 100 IT and security professionals. This exclusive gathering focused on sharing insights about the changing threat landscape and highlighted Palo Alto’s newest developments in cloud …

Cisco warned customers to patch two zero-day vulnerabilities that are actively being exploited in attacks and impact the company’s firewall software. The first one (CVE-2025-20333) allows authenticated, remote attackers to execute arbitrary code on devices running vulnerable Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) software, while the second …