Posted inAmazon Web Services
Posted inCloudflare WAF
WAF – WAF Release – 2025-09-24 – Emergency
This week highlights a critical vendor-specific vulnerability: a deserialization flaw in the License Servlet of Fortra’s GoAnywhere MFT. By forging a license response signature, an attacker can trigger deserialization of arbitrary objects, potentially leading to command injection. Key Findings GoAnywhere…







![Microsoft Fabric: Upcoming tenant settings for OneLake diagnostic logs [MC1158904] 33 Microsoft Fabric: Upcoming tenant settings for OneLake diagnostic logs [MC1158904]](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-nextvoyage-3763903-1024x683.webp)
![Microsoft Viva Pulse: Updates to data retention policy [MC1158895] 34 Microsoft Viva Pulse: Updates to data retention policy [MC1158895]](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-david-bartus-43782-879521-1024x683.webp)
![Microsoft Outlook: New third-party enriched properties available for customizing profile cards [MC1158902] 35 Microsoft Outlook: New third-party enriched properties available for customizing profile cards [MC1158902]](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-conojeghuo-173294-1024x683.webp)
![Microsoft Exchange Online | SMTP onboarding to App RBAC [MC1158911] 36 Microsoft Exchange Online | SMTP onboarding to App RBAC [MC1158911]](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-pachon-in-motion-426015731-16749547-1024x683.webp)
![OneDrive folder sync selection dialog temporarily unavailable when using zh-CN language setting [MC1158899] 37 OneDrive folder sync selection dialog temporarily unavailable when using zh-CN language setting [MC1158899]](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-d123x-792289-1024x683.webp)