MalwareBleeping Computer
9.8 — CRITICAL
Shell investigates 'potential incident' after Clop data theft claims
Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Clop ransomware gang claimed to have stolen 89GB of data from Shell, a British multinational energy conglomerate, after exploiting a critical improper input validation vulnerability in PTC Windchill and FlexPLM instances (CVE-2026-12569). The attack is part of larger attacks against Internet-exposed PTC Windchill and FlexPLM instances.
⚙️Technical Details
Affected Systems
PTC WindchillPTC FlexPLM
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Shell, General Electric, Philips
🛡️Recommended Actions
1Patch PTC Windchill and FlexPLM systems with the latest security patches
2Place compromised PLM platforms behind VPNs or trusted access gateways
3Isolate affected servers, collect forensic artifacts, and rotate exposed credentials before restoring service
📦Affected Products
Ptc FlexplmPtc Windchill PdmlinkPTC FlexPLMPTC Windchill Pdmlink
🔐NVD Verified DataVERIFIED
CVE-2026-12569 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-20CWE-502
Affected Products (CPE)
Ptc FlexplmPtc Windchill Pdmlink
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.