Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
ReliaQuest has uncovered a sophisticated JavaServer Pages (JSP) web shell deployed by the Clop ransomware group following the exploitation of CVE-2026-12569, a…
Tag: PTC
PTC Windchill PLM Software Under Attack
Windchill is a PLM software by PTC used for managing engineering data. It is vulnerable to CVE-2026-12569 and targeted by Clop's custom…
PTC FlexPLM Also Affected by Critical Flaw
FlexPLM is a product lifecycle management solution by PTC, also vulnerable to CVE-2026-12569 and exploited in the same campaign.
Cl0p Affiliates Exploit PTC Windchill and FlexPLM Flaws in Data Extortion Campaign
Threat actors linked to the Cl0p ransomware group are actively exploiting vulnerabilities in internet-exposed PTC Windchill and FlexPLM deployments as part of…
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability affecting PTC Windchill PDMlink and PTC…
PTC Windchill and FlexPLM Targeted by Clop
PTC's Windchill and FlexPLM products are enterprise PLM solutions storing sensitive engineering data. They were exploited via CVE-2026-12569 to deploy a custom…
CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability
PTC Windchill and FlexPLM Improper Input Validation Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…