Unpatched IBM Aspera Faspex file transfer service under active attack

At least one entity was compromised through a critical pre-authentication YAML deserialization vulnerability in IBM Aspera Faspex file transfer service; a patch was issued in January.

aspera aspera faspex attack authentication cloud security compromised critical deserialization faspex file file transfer ibm january patch ransomware service under unpatched vulnerability vulnerability management yaml