Back Ciberseguridadlatam

Cl0p explota falla crítica en software PLM — más de 40 empresas industriales comprometidas

Ciberseguridadlatam •Redacción CSL • August 22, 2026

El grupo ransomware aprovechó CVE-2026-12569 en PTC Windchill para robar datos de ingeniería de Shell, Philips y proveedores clave de Apple, repitiendo su táctica de explotación masiva en software empresarial. Cl0p volvió a ejecutar su estrategia de explotación masiva: encontrar una vulnerabilidad crítica en software empresarial ampliamente usado, comprometer decenas de organizaciones simultáneamente y publicar […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cl0p Ransomware Exploits Critical Vulnerability in PLM Software, Compromising 40+ Firms The Cl0p ransomware group has exploited a critical vulnerability, CVE-2026-12569, in PTC Windchill, affecting over 40 industrial companies, including Shell, Philips, and key Apple suppliers. This attack involved mass exploitation tactics, allowing Cl0p to simultaneously compromise multiple organizations by targeting widely used enterprise software. The vulnerability was published on June 18, 2026, and was added to the CISA KEV list for active exploitation on June 25, 2026. The attack highlights the ongoing threat posed by ransomware groups leveraging critical software flaws to steal sensitive engineering data. The situation remains urgent as organizations scramble to assess and mitigate the impact of this breach. 2 sources 70

Extracted Entities

Cl0p explota falla crítica en software PLM — más de 40 empresas industriales comprometidas

The full story

Extracted Entities

Attack Types (1)

Companies (3)

CVEs (1)

Platforms (1)

Ransomware Groups (1)