Aon Hit by Termite Ransomware Group Exploiting Critical Cleo Software Vulnerability (CVE-2024-50623)

Aon, a prominent professional services firm, has reportedly fallen victim to a ransomware attack attributed to the Termite group. The attack exploited CVE-2024-50623, an unauthenticated remote code execution flaw in Cleo file transfer products (LexiCom, VLTransfer, and Harmony). The breach was discovered on October 7, 2026, with public disclosure made the same day. This incident highlights the persistent threat of ransomware targeting supply chain and professional services organizations.