SecurityThe Hacker Newsabout 5 hours ago
Clop Web Shell Targets PTC Windchill Credentials
1 min read
A JSP web shell tied to Clop exploits CVE-2026-12569 in PTC Windchill and FlexPLM servers, decrypting keystore credentials and mapping vault data. ReliaQuest says the implant runs code in memory and exfiltrates LDAP credentials, enabling enterprise-wide compromise without additional tooling.
Level
Hype check
Tap to vote and see what everyone thinks.
