Clop ransomware targets Windchill, FlexPLM in data theft attacks

Published on July 24, 2026

The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. [...]

Continue reading on website
Other news

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

July 24, 2026
Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0.All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis says the underlying memory flaws may lead to remote code execution.Redis 6.2.23, 7.2.15, and 7.4.10

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

July 24, 2026
Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software's source code.Every version before 4.14.0 is affected. NodeBB has fixed them all, and administrators should be on 4.14.2.The simplest one takes a settings change. A