Vulnerabilities
PTC Windchill Vulnerability Exploited in Cl0p Ransomware Campaign
From advisory to active ransomware — the PTC Windchill flaw is on the wire this week, and reporting now ties the exploitation to a Cl0p-style extortion campaign.
Data Breaches
Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack
Confirmed at the parent, claimed by Anubis — Fairlife lands on the leak wire this week.
Ransomware
Cl0p Affiliates Chain PTC Windchill and FlexPLM Flaws for Unauthenticated RCE in Fresh Data-Extortion Campaign
Cl0p is back with a PTC Windchill and FlexPLM chain — a defender review for industrial-lifecycle customers this weekend.
Ransomware
PRODAFT Documents "DevMan" Ransomware-as-a-Service Portal Operated by "Funky Mantis"
Another named RaaS operator profile from PRODAFT — defender-team pattern-tracking this weekend.
Ransomware
Anubis Ransomware Group Threatens to Leak 1 TB of Data Stolen From Coca-Cola's Fairlife
The Fairlife incident escalates with an Anubis leak threat — food-industry ransomware continuation this week.
Ransomware
Nichirei Logistics Reports Recovery as Extortion Group Claims Responsibility for Cyberattack
The Nichirei cold-chain cyberattack closes with recovery and an extortion-group claim — supply-chain continuation this week.
Ransomware
Sysdig Reports JadePuffer Deploys ENCFORGE Ransomware Purpose-Built to Wipe AI Model Files
The first purpose-built AI-model ransomware lands from JadePuffer — a defender review for organizations hosting AI infrastructure this week.
Ransomware
Dark Reading Attributes SonicWall SMA Zero-Day Exploitation to INC Ransomware Operation
INC Ransomware named as the SonicWall SMA zero-day exploiter — defender teams stay in accelerated verification posture this weekend.
Ransomware
Armenia Detains Russian National Aleksandr Ermakov on US REvil Extradition Request; Family Disputes Identity
A cross-border REvil extradition drama - an identity dispute and the Armenian judicial process take center stage this week, with a Russian tourist detained on a US warrant his lawyers say names a different man.
Ransomware
Symantec Documents "Spirals" Ransomware Reportedly Locking Systems in Under 24 Hours
A fast-moving Rust-based ransomware family — defender detection-engineering review this week.
Ransomware
ReliaQuest: “The Gentlemen” Overtakes Qilin as Most Prolific Ransomware Operation
The ransomware leaderboard shifts — The Gentlemen tops the chart in ReliaQuest’s latest tracking, and defender-team pattern-watching continues this week from the analyst’s chair, not the attacker’s.
Ransomware
Coca-Cola Suspends Fairlife US Milk Production Following Ransomware Attack (SEC 8-K Filed)
A ransomware attack halts fairlife's US milk production and lands as a Coca-Cola SEC 8-K filing — food-industry sector-advisory coverage this week.