Cleo file transfer zero-days exploited by Clop for data theft ยท updates https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 Two unauthenticated file-write bugs in Cleo Harmony, VLTrader and LexiCom managed file transfer software (CVE-2024-50623 and CVE-2024-55956) were mass-exploited in December 2024 to plant a Java backdoor and steal data. Huntress saw exploitation from 2024-12-03 against systems already patched to 5.8.0.21; Cleo shipped 5.8.0.24 for the second bug. The Clop ransomware gang claimed the attacks. Added to the CISA KEV catalog on 2024-12-13, 2024-12-17. CISA lists known use in ransomware campaigns. en Tue, 17 Dec 2024 00:00:00 GMT Cleo file transfer zero-days exploited by Clop for data theft: CISA added CVE-2024-55956 to the KEV catalog (federal deadline 2025-01-07) https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-12-17-57d62906 Tue, 17 Dec 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Cleo file transfer zero-days exploited by Clop for data theft: Clop claims responsibility for the Cleo data-theft attacks https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-12-16-5ea1565c Mon, 16 Dec 2024 00:00:00 GMT critical <p><a href="https://www.bleepingcomputer.com/news/security/clop-ransomware-claims-responsibility-for-cleo-data-theft-attacks/">Source</a></p> Cleo file transfer zero-days exploited by Clop for data theft: Cleo advisory: patch 5.8.0.24 for CVE-2024-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-12-14-b5008733 Sat, 14 Dec 2024 00:00:00 GMT critical <p><a href="https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update-CVE-2024-55956">Source</a></p> Cleo file transfer zero-days exploited by Clop for data theft: CVE-2024-55956 published https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-12-13-42d2b41e Fri, 13 Dec 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-55956">Source</a></p> Cleo file transfer zero-days exploited by Clop for data theft: CISA added CVE-2024-50623 to the KEV catalog (federal deadline 2025-01-03) https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-12-13-e23bdbea Fri, 13 Dec 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Cleo file transfer zero-days exploited by Clop for data theft: Huntress warns that fully patched 5.8.0.21 systems are still exploitable https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-12-09-eba16f97 Mon, 09 Dec 2024 00:00:00 GMT critical <p><a href="https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild">Source</a></p> Cleo file transfer zero-days exploited by Clop for data theft: Earliest exploitation Huntress observed against Cleo servers https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-12-03-be46dace Tue, 03 Dec 2024 00:00:00 GMT critical <p><a href="https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild">Source</a></p> Cleo file transfer zero-days exploited by Clop for data theft: CVE-2024-50623 published https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956 https://pwn.watch/i/cleo-harmony-vltrader-lexicom-zero-days-cve-2024-50623-55956#2024-10-27-42acc539 Sun, 27 Oct 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-50623">Source</a></p>