> TritonInfoSec News
Home / Jul 25, 2026 / Story
0
#6 BleepingComputer general July 24, 2026 at 07:36 UTC

Clop ransomware targets Windchill, FlexPLM in data theft attacks

By Sergiu Gatlan

AI Summary

The Clop ransomware gang (Cl0p) has launched a new data theft extortion campaign targeting internet-exposed instances of PTC Windchill (PLM software) and FlexPLM, continuing their pattern of exploiting enterprise software platforms for mass data theft without encrypting files. This follows Clop's prior campaigns exploiting MOVEit and GoAnywhere vulnerabilities. Organizations running internet-facing PTC Windchill or FlexPLM instances should treat these as actively targeted and audit exposure immediately.

Read full article → https://www.bleepingcomputer.com/news/security/clo…

Relevance score: 80.0/100

# More from July 25

  1. 1
    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes The Hacker News
  2. 2
    Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller The Hacker News
  3. 3
    Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers The Hacker News
  4. 4
    Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say The Hacker News
  5. 5
    Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry The Hacker News
  6. 7
    Check Point warns of SmartConsole zero-day exploited in attacks BleepingComputer
  7. 8
    Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files The Hacker News
  8. 9
    New RefluXFS Linux flaw lets attackers gain root privileges BleepingComputer
  9. 10
    ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link The Hacker News