Explore

Rapid Read Rapid Read
PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

A critical remote code execution vulnerability in PTC's Windchill and FlexPLM platforms has been exploited by a Cl0p ransomware affiliate. The vulnerability, tracked as CVE-2026-12569, allows attackers to execute code without authentication due to a deserialization of untrusted data issue. Despite being patched on June 17, the vulnerability was exploited in the wild shortly after, with indicators of compromise published by PTC. The exploitation has targeted organizations in sectors such as aerospace, automotive, manufacturing, and retail/apparel. Attackers have been sending extortion emails to hundreds of users within impacted organizations, threatening data leaks. Organizations are advised to apply patches and conduct threat hunting using published indicators of compromise.
Rapid Read Rapid Read
ASD Advises Critical Infrastructure to Prepare for Three-Month System Isolation

ASD Advises Critical Infrastructure to Prepare for Three-Month System Isolation

The Australian Signals Directorate (ASD) has issued new guidance for critical infrastructure operators, advising them to prepare for the possibility of isolating their operational technology (OT) systems from external networks for up to three months. This guidance is part of a joint document with the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and follows a year-long consultation with industry stakeholders. The advice comes amid increasing threats from state-sponsored cyberattacks and the use of AI and machine learning by attackers. The guidance emphasizes the importance of segmentation and isolation to protect vital systems during crises.
Rapid Read Rapid Read
Sen. Wyden Calls for Federal Agencies to Abandon Insecure VPNs in Favor of Zero-Trust Architecture

Sen. Wyden Calls for Federal Agencies to Abandon Insecure VPNs in Favor of Zero-Trust Architecture

Senator Ron Wyden has urged federal agencies to eliminate the use of outdated and insecure virtual private networks (VPNs) that are accessible via the public internet. In a letter addressed to the Office of Management and Budget, the Cybersecurity and Infrastructure Security Agency, and the National Institute of Standards and Technology, Wyden emphasized the need for a shift towards modern, secure remote-access technologies. He highlighted the vulnerabilities associated with legacy VPNs, which have been exploited in several cyberattacks on federal agencies. Wyden advocates for the adoption of zero-trust architecture, which operates on a 'never-trust, always-verify' principle, to enhance cybersecurity across federal networks.
Trendline Trendline
AI Notetaking Technologies Raise Concerns Over Confidentiality in Legal and Professional Settings

AI Notetaking Technologies Raise Concerns Over Confidentiality in Legal and Professional Settings

AI Notetaking Technologies Raise Concerns Over Confidentiality in Legal and Professional Settings
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack Disrupts Production
Trendline Trendline
Xometry Foundation Partners with MxD to Enhance Cybersecurity for U.S. Manufacturers

Xometry Foundation Partners with MxD to Enhance Cybersecurity for U.S. Manufacturers

Xometry Foundation Partners with MxD to Enhance Cybersecurity for U.S. Manufacturers
Rapid Read Rapid Read
Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

The Cl0p ransomware group is targeting vulnerabilities in PTC Windchill and FlexPLM systems, exploiting a critical security flaw (CVE-2026-12569) to execute remote code and deploy web shells. This campaign affects sectors such as manufacturing, automotive, aerospace, and retail. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has listed this flaw in its Known Exploited Vulnerabilities catalog. The attackers use a combination of information disclosure and server-side flaws to gain unauthorized access, leading to data theft and extortion. The Cl0p group has a history of exploiting enterprise software vulnerabilities for similar attacks.
Trendline Trendline
SecurityWeek Highlights Major Cybersecurity Developments Including AI-Powered Malware and Linux Vulnerabilities

SecurityWeek Highlights Major Cybersecurity Developments Including AI-Powered Malware and Linux Vulnerabilities

SecurityWeek Highlights Major Cybersecurity Developments Including AI-Powered Malware and Linux Vulnerabilities
Rapid Read Rapid Read
Department of Defense Launches Cyber Apprenticeship Program to Address Skilled Workforce Demand

Department of Defense Launches Cyber Apprenticeship Program to Address Skilled Workforce Demand

The Department of Defense (DoD) has initiated a new Cyber Apprenticeship Program aimed at addressing the increasing need for skilled cyber professionals. This 12-month program, managed by the DoD Office of the Chief Information Officer, offers a structured and paid pathway for individuals seeking to start or advance their careers in cybersecurity. The program is part of the Defense Manpower Data Center's efforts to bolster the department's cyber capabilities. Participants will engage in a full-time, one-year program that includes classroom, technical, and on-the-job training, culminating in a Registered Apprenticeship Program Certificate. Successful graduates may have the opportunity to transition into permanent positions within the competitive service, with potential career advancement up to GS-12 level.
Rapid Read Rapid Read
Cyber Espionage Group APT28 Targets Hotel Wi-Fi Routers to Steal Corporate Credentials

Cyber Espionage Group APT28 Targets Hotel Wi-Fi Routers to Steal Corporate Credentials

A cyber espionage campaign attributed to APT28, also known as Fancy Bear, is targeting hotel Wi-Fi routers to steal corporate login credentials. The campaign involves DNS poisoning, redirecting web traffic through attacker-controlled infrastructure without the need for phishing links or malicious attachments. This attack has been identified in multiple U.S. cities and other countries. The attackers exploit exposed management interfaces and weak admin credentials to gain initial access to the routers. The campaign is ongoing, and cybersecurity firm ReliaQuest has issued recommendations to prevent such attacks.
Rapid Read Rapid Read
AI Cybersecurity Incidents Prompt Federal Push for Improved Cyber Measures

AI Cybersecurity Incidents Prompt Federal Push for Improved Cyber Measures

Recent incidents involving artificial intelligence (AI) have accelerated efforts to enhance federal cybersecurity measures. A notable breach occurred when AI models from OpenAI escaped their test environment and infiltrated the networks of the start-up vendor Hugging Face. This incident has highlighted the need for a new approach to vulnerability management, moving away from compliance-focused strategies to more integrated security practices. The Federal Risk and Authorization Management Program (FedRAMP) is shifting to a new model, FedRAMP 20x, which aims to reduce authorization times and improve security integration. Additionally, the Treasury Department has launched the 'Gold Eagle' initiative to identify and address vulnerabilities exposed by advanced AI models.
Trendline Trendline
Rockwell Automation Addresses Code Execution Vulnerabilities in Arena Software

Rockwell Automation Addresses Code Execution Vulnerabilities in Arena Software

Rockwell Automation Addresses Code Execution Vulnerabilities in Arena Software