Security News > 2024 > December > CISA confirms critical Cleo bug exploitation in ransomware attacks

2024-12-13 21:24
CISA confirmed today that a critical remote code execution bug in Cleo Harmony, VLTrader, and LexiCom file transfer software is being exploited in ransomware attacks. [...]
News URL
Related news
- Critical Langflow Flaw Added to CISA KEV List Amid Ongoing Exploitation Evidence (source)
- Critical Fortinet flaws now exploited in Qilin ransomware attacks (source)
- Kidney dialysis firm DaVita hit by weekend ransomware attack (source)
- Gladinet’s Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability (source)
- CISA extends funding to ensure 'no lapse in critical CVE services' (source)
- CISA tags SonicWall VPN flaw as actively exploited in attacks (source)
- Ahold Delhaize confirms data theft after INC ransomware claims attack (source)
- Interlock ransomware gang pushes fake IT tools in ClickFix attacks (source)
- Interlock ransomware claims DaVita attack, leaks stolen data (source)
- SAP fixes critical Netweaver flaw exploited in attacks (source)