Update: Cleo Urges Customers to ‘Immediately’ Apply New Patch as Researchers Discover New Malware

The bug was initially tagged as CVE-2024-50623 in October and patched by the company, but researchers from cybersecurity firm Huntress discovered that systems were still vulnerable even after applying the fix.