Cl0p's extortion gang claims to have stolen 89 gigabytes of engineering data from Shell and listed nearly 50 companies, including Philips and GE, on its leak site. The likely entry point: a critical, patched flaw in PTC Windchill and FlexPLM.
Category: Vulnerabilities & Exploits
Post
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
A joint US-South Korea advisory says Gunra ransomware is breaching networks through known Fortinet and Schneider Electric flaws, then stealing and encrypting data across healthcare, finance and government targets, giving victims five to seven days before publishing stolen files.
Post
APT28 Exploits Microsoft Office Zero-Day CVE-2026-21509: Europe Under Attack in 2026
Russian state-sponsored APT28 weaponised CVE-2026-21509 in zero-day document attacks targeting Ukraine and the EU in January 2026. Full exploit analysis and patch guidance.
Post
Ivanti Sentry Hit by Maximum-Severity Flaw: CVE-2026-10520 Allows Pre-Auth Root Access
Ivanti Sentry has a maximum severity flaw, CVE-2026-10520, letting unauthenticated attackers gain root access. Patches released 9 June 2026.
Post
India Now Absorbs More Than 3,000 Cyberattacks Every Single Day. The Numbers Have Not Stopped Growing
CERT-In recorded 1.32 million cybersecurity incidents between January and October 2023 alone. That is 25 times the volume recorded in 2017. India now faces the highest average weekly attack volume of any country tracked in global breach research and the trajectory has not turned.