$PHG

Cl0p ransomware group exploited a vulnerability in PTC's Windchill and FlexPLM software, affecting companies like Shell, Philips, General Electric, and Fiserv. The flaw, CVE-2026-12569, allows unauthenticated remote code execution, leading to the theft of engineering data. PTC patched the issue in June 2026, but exploitation continued. The campaign highlights a shift in Cl0p's tactics, focusing on industrial espionage rather than traditional ransomware attacks.

Philips and Imricor launched a cardiac interventional MR lab solution, combining Philips' 1.5T MRI platform with Imricor's MR-compatible systems. The solution aims to enhance cardiac ablation procedures with MRI-guided precision, reducing radiation exposure. Philips (NYSE: PHG) sees this as a step in advancing MRI across the care continuum, while Imricor (ASX: IMR) highlights the collaboration's shared vision.

Royal Philips and Imricor Medical Systems launched a cardiac interventional MR lab solution, combining Philips' 1.5T MRI platform with Imricor's MR-compatible systems. The solution aims to enhance cardiac intervention procedures by providing detailed tissue visualization without radiation. It is commercially available in CE-marked markets and some U.S. configurations, with further U.S. availability pending regulatory clearances.

Philips (PHG, PHIA) received a $33.7M award from ARPA-H to develop AI-enabled robotic stroke care with Johns Hopkins and Boston University. The project aims to expand access to advanced stroke treatments by integrating robotics, AI, and imaging on Philips' Azurion platform.

Philips priced a EUR 650M EU Green Bond with a 4.0% coupon, due 2034. The notes were oversubscribed 2.7x. Proceeds will fund green projects. The company maintains investment-grade ratings from S&P, Moody's, and Fitch.

Citrix has disclosed two vulnerabilities in its NetScaler Gateway and ADC devices, urging immediate patching. The flaws include a critical authentication bypass bug (CVE-2026-19490) and a high-severity memory overflow vulnerability (CVE-2026-19489). Citrix stated affected versions include supported customer-managed NetScaler ADC and NetScaler Gateway, as well as certain FIPS and NDcPP builds. The company has not confirmed active exploitation but typically issues such bulletins when exploitation

Z.ai launched GLM-5.3, an open-source model that outperformed US models in cybersecurity tests. RingCentral disclosed a breach affecting 1.6 million customer records. Clop exploited a PLM flaw, claiming data breaches at Shell, Philips, and GE. Fortinet acquired Virtue AI to expand its AI security portfolio. CISA issued an advisory on Medusa ransomware attacks.

Cybercrime group Clop claims it stole data from more than 40 companies, including Shell and General Electric, and lists firms such as Philips, Fiserv, and Toast. The article cites denials from Toast and Fiserv that customer or personal data was taken, and Shell says access was blocked with no operational impact. It links Clop to a July PTC Windchill/FlexPLM flaw (CVE-2026-12569).

Philips and GE are investigating claims by the Clop ransomware group that it stole data from both companies. Clop listed 43 organizations on its leak site, and the campaign may relate to attacks on internet-exposed PTC Windchill and FlexPLM systems tied to CVE-2026-12569. Philips confirmed an internal server compromise; GE is assessing the claim.

BleepingComputer reports GE and Philips are investigating alleged data breaches attributed to the Clop ransomware group, and Shell confirmed an Aug. 14 attack, also attributed to Clop. The gang claimed stolen data including diagrams and project plans from 43 companies. The breaches reportedly exploited known PTC Windchill and FlexPLM vulnerabilities; PTC issued patches and CISA ordered federal agencies to patch within three days.