PTC Windchill RCE under active web-shell exploitation, Turla's new STOCKSTAY backdoor hits Ukraine, Citizen Lab catches Cellebrite tools still working in Russia post-cutoff, DirtyClone Linux LPE, Vertiv UPS bugs, Scattered Spider pleas, and a botnet tied to a public proxy firm.