CISA warns of ransomware gangs exploiting Cleo, CyberPanel bugs

CISA has confirmed that ransomware groups are actively exploiting two vulnerabilities—CVE-2024-50623 in Cleo file-transfer products and CVE-2024-51378 in CyberPanel—prompting urgent patching deadlines for federal agencies. Security researchers report multiple ransomware strains (including PSAUX, Babuk, Cerber, and actors linked to Termite) leveraging these flaws, with evidence of widespread compromise across enterprise file-sharing and web hosting environments, including thousands of CyberPanel instances reportedly targeted.