Article - ThreatCluster

Back Ciberseguridadlatam

Ciberseguridadlatam •Redacción CSL • August 22, 2026

# Cl0p explota falla crítica en software PLM — más de 40 empresas industriales comprometidas El grupo ransomware aprovechó CVE-2026-12569 en PTC Windchill para robar datos de ingeniería de Shell, Philips y proveedores clave de Apple, repitiendo su táctica de explotación masiva en software empresarial. Cl0p volvió a ejecutar su estrategia de explotación masiva: encontrar […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cl0p Ransomware Exploits Critical Vulnerability in PLM Software, Compromising 40+ Firms The Cl0p ransomware group has exploited a critical vulnerability, CVE-2026-12569, in PTC Windchill, affecting over 40 industrial companies, including Shell, Philips, and key Apple suppliers. This attack involved mass exploitation tactics, allowing Cl0p to simultaneously compromise multiple organizations by targeting widely used enterprise software. The vulnerability was published on June 18, 2026, and was added to the CISA KEV list for active exploitation on June 25, 2026. The attack highlights the ongoing threat posed by ransomware groups leveraging critical software flaws to steal sensitive engineering data. The situation remains urgent as organizations scramble to assess and mitigate the impact of this breach. 2 sources 70

Extracted Entities

The full story

Extracted Entities

Attack Types (2)

Companies (3)

CVEs (1)

MITRE ATT&CK (2)

Platforms (1)

Ransomware Groups (1)