Coverage of PTC's Product Lifecycle Management and Product Data Management platforms — Windchill PDMLink and FlexPLM — the enterprise engineering software that owns CAD, BOMs, and manufacturing releases at large industrial and defense firms. Not ICS itself, but the pipeline into it. Combined article + CVE feed for the PTC beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2026-12569/https://0daynews.com/cve/cve-2026-12569/Unauthenticated remote code execution in PTC Windchill PDMLink and FlexPLM via untrusted-data deserialization. Added to CISA KEV 2026-06-25 with a three-day patch mandate. JSP webshells observed being dropped on unpatched instances.Tue, 01 Sep 2026 00:00:00 GMTPTCcriticalcvehttps://0daynews.com/articles/2026-08-18-clop-windchill-webshell-credential-theft/https://0daynews.com/articles/2026-08-18-clop-windchill-webshell-credential-theft/ReliaQuest finds a Clop-linked JSP implant engineered for PTC Windchill that decrypts LDAP credentials and maps file vaults to steal engineering data.Tue, 18 Aug 2026 18:00:00 GMTPTCarticlehttps://0daynews.com/articles/2026-07-25-clop-targets-ptc-windchill-flexplm-data-theft/https://0daynews.com/articles/2026-07-25-clop-targets-ptc-windchill-flexplm-data-theft/Clop is running an active data-theft campaign against internet-exposed PTC Windchill and FlexPLM. No encryption — straight to exfiltration and extortion.Sat, 25 Jul 2026 09:00:00 GMTPTCarticlehttps://0daynews.com/articles/2026-07-11-ptc-windchill-flexplm-cve-2026-12569-kev-jsp-webshell/https://0daynews.com/articles/2026-07-11-ptc-windchill-flexplm-cve-2026-12569-kev-jsp-webshell/PTC Windchill PDMLink and FlexPLM ship an unauth deserialization RCE. CISA added it to KEV on 2026-06-25. Unpatched instances are still catching JSP webshells.Sat, 11 Jul 2026 17:15:00 GMTPTCarticle