Remote support and file transfer flaws in ransomware attacks

The report summarizes four critical flaws in internet‑facing remote support and managed file transfer products (SimpleHelp, CrushFTP, Fortra GoAnywhere MFT and BeyondTrust) that CISA added to its Known Exploited Vulnerabilities catalog after evidence of use by ransomware actors; it lists CVEs, exploitation timelines, affected/fixed versions, recommended checks (patching, credential resets, log searches, and downstream notification) and stresses prioritizing internet‑facing instances.