PTC Windchill Vulnerability Exploited in Ransomware Campaign

SecurityWeek RSS digest covering a critical, reportedly exploited PTC Windchill unsafe deserialization vulnerability enabling unauthenticated remote code execution; MedusaHVNC malware using hidden Windows desktops for covert persistence and remote access; attacks through compromised public Wi-Fi gateways to harvest Microsoft 365 credentials; and multiple ransomware-linked data breaches affecting millions. Other items discuss AI security initiatives, mobile-app SBOM analysis, cybersecurity funding, and AI vulnerability-testing benchmarks.