Software company Cleo has released a patch for a zero-day vulnerability in its managed file transfer products—Harmony, LexiCom, and VLTrader. The issue had not yet been assigned a CVE but appeared to allow an unrestricted file upload and download exploit. Although a patch was published in late October, it did not fully rectify the issue, leading to the firm recommending that clients move systems behind a firewall until a new patch was ready.

Kowloon East Cluster April 05: 56k Patient Data Leak Spurs Cyber Spend – Meyka
Kowloon East Cluster April 05: 56k Patient Data Leak Spurs Cyber Spend Meyka

