CISA orders federal gov to patch critical Fortra file transfer bug All federal civilian agencies have been ordered to patch a vulnerability affecting a widely-used file transfer tool that some researchers believe is being exploited by hackers. The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-10035 — a critical vulnerability in Fortra's GoAnywhere MFT solution — to its Known Exploited Vulnerabilities list Monday. Federal civilian agencies have until October 20 to patch it. The vulnerability carries a severity score of 10 out of 10 and has caused alarm among cybersecurity experts who have criticized Fortra for not saying whether it has seen the bug being exploited. In comments to Recorded Future News over the past week, Fortra would not confirm industry reports…