Cl0p Affiliates Exploit PTC Windchill and FlexPLM in Active Campaign
Ransom-ISAC reports Cl0p affiliates are exploiting internet-exposed PTC Windchill and FlexPLM through a flaw chain, deploying JSP webshells and stealing data. PTC has issued fixes; no victims were publicly listed as of July 22.