BCG Critical Systems Security Brief
Cl0p-linked actors exploit CVE-2026-12569 against internet-exposed PTC Windchill and FlexPLM, staging engineering data for extortion. Fastjson 1.x RCE confirmed exploitable under default configs. GitLab PoC published. Router credential theft continues from Russian FSB Center 16.