Post #4407868

Cl0p ransomware started listing victims from their campaign of exploitation of an RCE vuln in PTC Windchill PDMlink and PTC FlexPLM. The victims seem to be anonymised for now. Exploited bug: https://www.cve.org/CVERecord?id=CVE-2026-12569 In fact, Ransomware-ISAC warned on 22 July about the campaign by Cl0p affiliates, targeting internet-exposed PTC Windchill and FlexPLM deployments: https://ransom-isac.org/blog/clop-windchill-flexplm-exploitation/ The vuln was added to CISA's KEV in the end of June.