PTC
In 9 briefs, most recently 20 August 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
1 PTC vulnerability is on CISA's list of vulnerabilities exploited in the wild, 1 of them used in ransomware campaigns. Most recent:
- CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability
Coverage in DanSec Daily
- Sakura Internet and CareCloud breaches, Dahua camera compromises, and the Cl0p PTC Windchill extortion campaign, plus actively exploited Windows IKE and GitLab …
- The CareCloud breach growing to 3.7M people, Medusa ransomware hitting 500+ US critical infrastructure orgs, and Clop's attack on PTC Windchill servers.
- Coca-Cola's Fairlife data theft, Ernst & Young and Origin Energy breaches, and a FastJson zero-day exploited in the wild, plus Dysphoria botnet and Mirage …
- Steam forums abused in ClickFix attacks spreading XMRig miners; ShinyHunters-leaked data fuels sextortion emails; Cl0p exploits PTC Windchill flaws.
- Origin Energy customer data leak, Upbound's $13M fraud losses, and Laundry Bear's Zimbra zero-day stealing email and 2FA codes.
- Polymarket $3M frontend hack via vendor, Klue-Salesforce breach hitting two dozen firms, and Signal backup-key phishing by Russian-linked hackers.
- Covers PTC Windchill RCE exploited in the wild, Cisco CUCM SSRF weaponized within 24 hours, and Turla's new STOCKSTAY .NET backdoor targeting Ukraine.
- Covers the European Commission's Amazon cloud breach, the hack of FBI Director Kash Patel's email, and TeamPCP's Telnyx PyPI supply chain attack.
- Infinite Campus and HackerOne breaches, TeamPCP's LiteLLM PyPI supply chain attack, and malvertising abusing a Huawei driver to kill EDR.