Skip to main content
IMMUNITYSEC

Threat Intelligence News & Analysis

Analysis of active threat actors and campaigns, including state-sponsored operations, data theft extortion, attack infrastructure, and law enforcement takedowns. Articles document the tooling, infrastructure, and targets behind intrusions, along with the advisories and defensive actions that follow.

Threat Intelligence News & Analysis Articles

2 Articles
Threat Intelligence News & Analysis
2026-08-30•6 min read

Cl0p Ransomware Exploits PTC Windchill CVE-2026-12569: Shell, Philips, GE Among 43 Named Victims

The Cl0p extortion group exploited CVE-2026-12569, a deserialization flaw in PTC Windchill and FlexPLM, and named Shell, Philips, General Electric, Fiserv, and dozens of other companies as data theft victims on its leak site. As in Cl0p's MOVEit campaign, the group steals data without encrypting systems, but this time the targets are CAD files, blueprints, and engineering documentation.

Threat Intelligence News & Analysis
2026-08-28•4 min read

DOJ and FBI Seize QScan and QTRouter: China-State Hacking Platforms Targeting U.S. Critical Infrastructure

The U.S. Justice Department and FBI seized domains powering the QScan and QTRouter platforms operated by PRC-state group QTFY (Nanjing Xinjiuwei Network Technology Company), used since at least 2018 to target NASA, the Federal Reserve, DOE, DOJ, HHS, NIH, and the U.S. Senate. DOJ later corrected its statement to clarify the agencies were targets, only some of which were compromised.

Related

Tool categories

Open Source Intelligence ToolsPhishing Simulation ToolsRed Teaming ToolsThreat Intelligence Tools