Tag

#ransomware

2 stories tagged ransomware.

Chart of Cl0p extortion timeline from initial access via PTC Windchill RCE through data staging and extortion. Key figures: unauthenticated RCE chain, 72 hour window to mass exfiltration, zero encryption phase.

Cl0p exploits PTC Windchill RCE in exposed PLM

Cl0p affiliates exploit unauthenticated RCE in internet-exposed PTC Windchill and FlexPLM to steal data. Patch, segment, and block external access now.

Lars Cornelissen · Jul 27, 2026

Citrix Bleed 2 timeline showing 23 days from Citrix advisory to CISA KEV, 1 day for the CISA remediation window, and 378 days to the Anubis ransomware report.

Cyber security

Citrix Bleed 2 turns ransomware into identity theft

Citrix Bleed 2 is now an Anubis ransomware access path. Patch NetScaler, kill sessions, and hunt RMM plus credential abuse.

Lars Cornelissen · Jul 3, 2026