Our MDR squad is looking at what appears to be #WS_FTP Server exploitation in the wild. Not surprising. https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/
Critical Vulnerabilities in WS_FTP Server | Rapid7 Blog

Rapid7
@catc0n I didn't even know ws_ftp was still around.
@mpmartin8443 that’s what everyone keeps saying and yet there’s a reasonable internet-exposed footprint that was pretty easily confirmable by MDR teams looking at customer environments 🤷🏻‍♀️