Fortra® Security & Trust Center

Patch Tuesday Analysis
Blog

February 2026 Patch Tuesday Analysis

By Tyler Reguly on Tue, 02/10/2026
Today’s Patch Tuesday Alert addresses Microsoft’s February 2026 Security Updates. The FIRE team is actively working on coverage for these vulnerabilities and expect to ship that coverage as soon as it is completed.
Vulnerability Management
Blog

SEO Poisoning Marketplace Topping Search Results, Impersonating Top Financial Institutions

By Kyle Skwirsk on Mon, 01/26/2026
Introduction to the HaxorSEO MarketplaceFortra Intelligence and Research Experts (FIRE) have uncovered a group of active malicious threat actors operating since 2020. The group refers to themselves as Haxor, a slang word for hackers, and their marketplace as HxSEO, or HaxorSEO. HxSEO has established its primary base of operations and marketplace on Telegram and WhatsApp. HxSEO stands out for...
phishing-hook
Blog

BEC Global Insights Report: December 2025

By JT Newby on Fri, 01/16/2026
This report from Fortra Intelligence & Research Experts (FIRE) outlines key BEC trends for December 2025 based on active defense engagements. Findings include a 1% increase in overall attack volume compared to November, with gift cards as the leading cash-out method (52.8%) and Apple Store cards being most requested (50%).
Patch Tuesday Analysis
Blog

January 2026 Patch Tuesday Analysis

By Tyler Reguly on Tue, 01/13/2026
Today’s Patch Tuesday Alert addresses Microsoft’s January 2026 Security Updates. The FIRE team is actively working on coverage for these vulnerabilities and expect to ship that coverage as soon as it is completed.
Threat Research & Intelligence
Vulnerability Management
Security Advisory

Weak Password Hash in Core Privileged Access Manager (BoKS)

Tue, 12/16/2025
Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms. This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain.
FI-2025-014
Medium
CVE-2025-13532
Patch Tuesday Analysis
Vulnerability Research

December 2025 Patch Tuesday Analysis

By Tyler Reguly on Tue, 12/09/2025
Today’s Patch Tuesday Alert addresses Microsoft’s December 2025 Security Updates. The FIRE team is actively working on coverage for these vulnerabilities and expect to ship that coverage as soon as it is completed.
Threat Research & Intelligence
Security Advisory

Improper Access Control in SFTP service of GoAnywhere MFT

Fri, 12/05/2025
An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with an Authentication Alias and a valid SSH key but limited to Password authentication for SFTP to still login using their SSH key.
FI-2025-013
Medium
CVE-2025-8148