company
Cybersecurity company providing managed detection and response services, with a threat research team that tracks emerging attack campaigns and vulnerabilities.
No evidence-backed relationships are recorded.
Shell says it is investigating after Clop claimed 89GB of engineering data. It is one of 43 names the gang tied to a single flaw in internet-exposed PTC Windchill and FlexPLM.
Reality
Suspected Cl0p operators chain a FlexPLM WSDL disclosure to CVE-2026-12569 for unauthenticated code execution. No encryption stage means ransomware-tuned detections stay silent.
Perspective Coverage
8 publishersReality
A ReliaQuest employee gave up a password and an MFA push five days after the company named the .claims campaign. Device trust, not training, kept the session worthless.
Perspective Coverage
5 publishersReality
The distributor found the intrusion on August 25, 2026, the same day ShinyHunters says its four-day exfiltration ended. It has not named the vendor applications involved, so customers are left scoping their own integrations.
Perspective Coverage
9 publishersReality
ReliaQuest's tests show Exchange Online accepts unauthenticated mail when the visible From header matches the tenant domain and the SMTP envelope sender is left empty. Forty percent of those messages went to senior leaders.
Reality
ReliaQuest says an August 22 caller named a real colleague to steer staff onto a lookalike single sign-on page, and the password plus push approval that followed bought a brief session on its identity dashboard.
Reality
ReliaQuest says a custom JSP web shell decrypts LDAP admin secrets with Windchill's own API and indexes the design vault over existing database connections. Network telemetry sees very little.
Reality