#windchill,

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

Aug 19, 2026 // 08:52

A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for […]

Clop created custom web shell for Windchill data theft attacks

Aug 18, 2026 // 23:37

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to […]

Clop created custom web shell for Windchill data theft attacks

Aug 18, 2026 // 23:37

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to […]

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Jul 25, 2026 // 13:38

Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed PTC Windmill and […]

Clop ransomware targets Windchill, FlexPLM in data theft attacks

Jul 24, 2026 // 13:37

The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. Clop has […]

CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue

Jun 26, 2026 // 15:38

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical remote code execution vulnerability impacting PTC Windchill PDMlink and PTC FlexPLM enterprise […]

Critical Windchill, FlexPLM bug poses immediate remote code execution threat, PTC warns.

Mar 25, 2026 // 10:57

PTC Inc. is alerting users to a serious security gap in Windchill and FlexPLM, popular PLM software, which could allow hackers to run code remotely. […]