Clop gang targets Windchill FlexPLM in data theft attacks

Sergiu Gatlan reports The Clop ransomware gang also tracked as Cl0p is targeting Internetexposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign Clop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE202612569 which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances As cybersecurity company Source