Philippines Nuclear Agency Breached via Unpatched ownCloud Flaws
Threat actors exploit unpatched ownCloud vulnerabilities to breach the Philippines nuclear agency, stealing sensitive databases and credentials.
- The Philippine Nuclear Research Institute suffered a major security breach, resulting in the theft of reactor databases, personnel records, and internal credential stores.
- The attackers targeted unpatched and outdated instances of ownCloud deployed within the agency's network infrastructure.
- Administrators must immediately audit file-sharing platforms, apply missing software updates, and rotate compromised credentials across all enterprise systems.