Explore

Trendline Trendline
Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack

Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack

Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production
Trendline Trendline
Coca-Cola Confirms Ransomware Attack on Fairlife, Data Stolen

Coca-Cola Confirms Ransomware Attack on Fairlife, Data Stolen

Coca-Cola Confirms Ransomware Attack on Fairlife, Data Stolen
Rapid Read Rapid Read
Cl0p Ransomware Exploits PTC Windchill Vulnerability, Targeting Multiple Industries

Cl0p Ransomware Exploits PTC Windchill Vulnerability, Targeting Multiple Industries

A critical remote code execution (RCE) vulnerability in PTC's product lifecycle management platforms, Windchill and FlexPLM, is being actively exploited by a Cl0p ransomware affiliate. The vulnerability, identified as CVE-2026-12569 with a CVSS score of 9.3, involves the deserialization of untrusted data and can be exploited without authentication. Although PTC patched the vulnerability on June 17, it was quickly exploited in the wild, prompting PTC to release indicators of compromise (IoCs). Recent reports from ReliaQuest and Ransom-ISAC indicate that the Cl0p affiliate is targeting organizations in the aerospace, automotive, manufacturing, and retail/apparel sectors. The attackers have been using a combination of pre-authentication information disclosure and server-side flaws to achieve RCE and deploy webshells. They have also been sending extortion emails to affected organizations, although they have not yet publicly listed victims or claimed credit for the campaign.
Rapid Read Rapid Read
PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

A critical remote code execution vulnerability in PTC's Windchill and FlexPLM platforms has been exploited by a Cl0p ransomware affiliate. The vulnerability, tracked as CVE-2026-12569, allows attackers to execute code without authentication due to a deserialization of untrusted data issue. Despite being patched on June 17, the vulnerability was exploited in the wild shortly after, with indicators of compromise published by PTC. The exploitation has targeted organizations in sectors such as aerospace, automotive, manufacturing, and retail/apparel. Attackers have been sending extortion emails to hundreds of users within impacted organizations, threatening data leaks. Organizations are advised to apply patches and conduct threat hunting using published indicators of compromise.
Trendline Trendline
Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities

Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities

Coca-Cola Resumes Fairlife Production After Ransomware Attack Disrupts U.S. Facilities
Rapid Read Rapid Read
Meccha Chameleon Servers Compromised by Malware, Discord Hacked

Meccha Chameleon Servers Compromised by Malware, Discord Hacked

A vulnerability in the Meccha Chameleon game allowed malware to be distributed through Steam Workshop maps. The issue, which has been patched, was highlighted by a Medium post from user Feint, who noted that a command prompt window appeared during map downloads, indicating a malware dropper. The developer, Haganeiro, confirmed the vulnerability and stated it has been fixed. Additionally, the game's Discord server was hacked due to a system engineer's compromised PC, leading to altered server permissions and staff bans. The developer is working with Discord Support to resolve the issue.
Rapid Read Rapid Read
Klue Breach Highlights Vulnerabilities in SaaS Integrations and Third-Party Cyber Risk

Klue Breach Highlights Vulnerabilities in SaaS Integrations and Third-Party Cyber Risk

The cybersecurity landscape has been shaken by a breach involving Klue, a Vancouver-based software-as-a-service (SaaS) company. The incident began as a supply chain breach by the Icarus criminal group, which exploited an unused service account credential to access Klue's integration infrastructure. This allowed the attackers to harvest OAuth tokens, granting them extensive access to customer environments. The breach escalated when a second criminal group claimed to have compromised Icarus, further complicating the situation. Klue, which provides an AI-powered competitive intelligence platform, serves over 500 customers and integrates with major platforms like Salesforce and HubSpot. The breach exposed significant weaknesses in SaaS integrations, identity-based trust, and third-party risk management.
Trendline Trendline
Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch

Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch

Fastjson 1.x Vulnerability Exploited in Attacks Amid Lack of Patch
Rapid Read Rapid Read
Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

The Cl0p ransomware group is targeting vulnerabilities in PTC Windchill and FlexPLM systems, exploiting a critical security flaw (CVE-2026-12569) to execute remote code and deploy web shells. This campaign affects sectors such as manufacturing, automotive, aerospace, and retail. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has listed this flaw in its Known Exploited Vulnerabilities catalog. The attackers use a combination of information disclosure and server-side flaws to gain unauthorized access, leading to data theft and extortion. The Cl0p group has a history of exploiting enterprise software vulnerabilities for similar attacks.
Trendline Trendline
Researcher Publishes Exploit for GitLab RCE Vulnerability, Urges Immediate Updates

Researcher Publishes Exploit for GitLab RCE Vulnerability, Urges Immediate Updates

Researcher Publishes Exploit for GitLab RCE Vulnerability, Urges Immediate Updates
Rapid Read Rapid Read
CTM360 Research Unveils Evolution of Insurance Phishing into Real-Time Account Hijacking

CTM360 Research Unveils Evolution of Insurance Phishing into Real-Time Account Hijacking

CTM360's recent research reveals a significant evolution in phishing tactics targeting insurance companies. Traditionally, phishing involved collecting credentials for later use, but attackers now engage in real-time account hijacking. This method synchronizes with victims' login processes, allowing attackers to authenticate against legitimate insurance portals as victims unknowingly complete their login. The research highlights the use of Google Ads as a primary attack vector, redirecting users to phishing sites that mimic genuine insurance providers. These campaigns target multiple regions, including the U.S., and leverage disposable infrastructure to evade detection.