Threat actors exploited unpatched vulnerabilities in ownCloud to gain initial access to the Philippines Nuclear Research Institute, resulting in the exfiltration of reactor databases, personnel records, and credential stores. The incident underscores the risk of delayed patching in critical infrastructure environments.

What should defenders do?

Organizations using ownCloud should apply the latest security updates and patches provided by ownCloud immediately. It is recommended to review ownCloud security advisories, update to the latest stable version, and enforce strict access controls to prevent unauthorized data exfiltration. Network segmentation and monitoring for unusual data transfer activity are also advised.

highData Breaches

Unpatched ownCloud Vulnerabilities Exploited Against Philippines Nuclear Research Institute

Threat actors leveraged known flaws to access sensitive nuclear databases and personnel records

CyberIntel DeskPublished 25 days agoUpdated less than a minute ago1 min read

Unpatched ownCloud Vulnerabilities Exploited Against Philippines Nuclear Research Institute

Key Takeaways

Threat actors exploited unpatched ownCloud vulnerabilities to breach the Philippines Nuclear Research Institute.
Sensitive data stolen included reactor databases, personnel records, and credential stores.
The breach was reported in September 2026, following the disclosure of relevant security advisories.

Related Security News

highData Breaches

Times Car Confirms Data Breach Affecting 6.6 Million User Accounts

Times Car, a Japanese car-sharing service, has confirmed a data breach compromising approximately 6.6 million user accounts. The incident was disclosed late last week, with the exact attack vector and nature of exposed personal information yet to be fully specified. Authorities and the company are reportedly investigating the breach.

BleepingComputerabout 4 hours ago1 min read

highdata-breaches

French Tax Administration Data Breach Exposed Hundreds of Thousands of Records via Stolen Staff Credentials

An unauthorized access incident at France's Direction Générale des Finances Publiques (DGPP) compromised tax data belonging to hundreds of thousands of taxpayers and businesses between June and July 2026. According to a report published by France's national cybersecurity agency ANSSI on 29 September 2026, the attacker used stolen staff passwords to gain entry. The agency stated the attack was 'not sophisticated' and went undetected for seven weeks due to weak security controls. ANSSI noted that neither the tax administration nor the agency itself observed data exfiltration, though the breach resulted in unauthorized access to sensitive fiscal information.

The Hacker Newsabout 5 hours ago1 min read