Hackers are actively exploiting a high-risk vulnerability in Cleo’s file transfer products, Harmony, VLTrader, and LexiCom, causing severe risk to businesses. A malware named Malichus has been identified, targeting at least 10 companies in consumer products, food, trucking, and shipping sectors. Despite Cleo’s patches, its products remain vulnerable. Organizations are advised to update to the latest product version, remove impacted products from public internet, and place them behind a firewall.
Gamaredon Deploys Android Spyware “BoneSpy” and “PlainGnome” in Former Soviet States
Russia-linked threat group Gamaredon has been linked to two new Android spyware tools, BoneSpy and PlainGnome, marking the first use of mobile-only malware in its