Months after first GoAnywhere MFT zero-day attacks, Censys still sees ~180 public admin panels

**Executive Summary:** In early February 2023 a critical pre-authentication RCE (CVE-2023-0669) in Fortra's GoAnywhere MFT was actively exploited by ransomware groups (notably Clop and BlackCat) to exfiltrate data from multiple high-profile organizations; Censys observed 179 exposed admin panels as of April 25, 2023 with 55 instances likely unpatched, and recommends upgrading to GoAnywhere 7.1.2+, rotating master encryption keys, resetting credentials, reviewing logs, and removing internet exposure of admin consoles.