The Clop ransomware gang confirmed they exploited zero-day vulnerabilities to launch data-theft attacks against Cleo, who provides secure file transfer solutions for businesses.
Cleo's recent fix for CVE-2024-50623 addressed a serious vulnerability that permitted unrestricted file upload and download, which could be exploited for remote code execution.
Collection
[
|
...
]