Back to Newswire
Security

Cl0p names more than 40 alleged victims in Windchill campaign

Cl0p names more than 40 alleged victims in Windchill campaign Image: Primary
The Cl0p ransomware group has named more than 40 organizations it alleges were targeted through a vulnerability in PTC Windchill and FlexPLM platforms, SecurityWeek reported. The flaw, CVE-2026-12569, allows remote unauthenticated code execution through specially crafted requests. SecurityWeek said Cl0p affiliates used it to deploy web shells and access data from Windchill users. The named organizations include Shell, Philips, Fiserv, Zebra Technologies and Ingersoll Rand. Several companies said they were aware of the claims and investigating, but none confirmed a significant breach.
Sources
SecurityWeek
Published by Tech & Business, a media brand covering technology and business. This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
Related Stories
Security

Microsoft issues Defender signature fix for scan crashes

BleepingComputer
AI Security

OpenAI says it added isolation and monitoring controls for advanced-model research

PCMag UK
Security

CISA says Medusa ransomware affected more than 500 critical-infrastructure organizations

BleepingComputer
Security Infrastructure

Windchill web shell reported to decrypt credentials and map engineering vaults

The Hacker News