Hackers exploit critical PTC Windchill PLM software flaw
CVEs:
CVE-2026-12569
Indicators of Compromise
1013 articles containing extracted IOCs (CVEs, IPs, hashes, domains, URLs, emails)
Amazon Q Developer extension vulnerability could have exposed cloud credentials
CVEs:
CVE-2026-12957
Curl fixes 18 vulnerabilities, including a 25-year-old bug
CVEs:
CVE-2026-8932
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
CVEs:
CVE-2026-12957
Russia accuses Apple of ‘political censorship’ after VK apps removed from App Store
Domains:
mail.ru
New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries
CVEs:
CVE-2026-46331
Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk
CVEs:
CVE-2024-2658
New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets
CVEs:
CVE-2026-43503
FOSSBilling Flaw Lets Admin Attackers Abuse DI Container for SQL Access and RCE
CVEs:
CVE-2026-28496
Synology issues critical fix for MailPlus Server vulnerabilities
CVEs:
CVE-2026-13136
CVE-2026-13135
U.S. CISA adds Cisco and PTC Windchill and FlexPLM flaws to its Known Exploited Vulnerabilities catalog
CVEs:
CVE-2026-12569
Hackers Exploit WinRAR CVE-2025-8088 to Plant Startup Shortcut and Run PowerShell Loader
CVEs:
CVE-2025-8088
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
CVEs:
CVE-2026-12569
CISA Adds Actively Exploited Cisco Unified CM Flaws to KEV Catalog
CVEs:
CVE-2026-20230
Website shames companies for not offering passkeys
Domains:
whynopasskeys.com
ManageEngine AD360 Integrated Products Hit by Account Takeover Vulnerability
CVEs:
CVE-2026-11374
pydicom pynetdicom Library
pydicom pynetdicom Library
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVEs:
CVE-2026-12569
CVE-2026-20230
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
CVEs:
CVE-2025-67038