Cl0p Ransomware Exploits Cleo Vulnerability, Threatens Data Leaks

Cl0p claims to have exploited a critical zero-day (CVE-2024-55956) in Cleo’s managed file transfer products (Harmony, VLTrader, LexiCom), threatening to publish stolen data and mirroring prior large-scale MFT attacks (MOVEit, GoAnywhere); organizations using Cleo should immediately apply patches, review security, and monitor for compromise due to significant supply-chain and operational impact risk.