Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Threat actors gained access to the Philippines nuclear agency by exploiting a vulnerability in ownCloud, allowing them to steal sensitive information. The stolen data includes reactor databases, personnel records, and credential stores. The vulnerability exploited is described as old and unpatched, indicating a known flaw that had not been addressed. This exploitation resulted in a significant breach of the agency's systems. The use of a commodity vulnerability in ownCloud suggests that the attack may not have required highly sophisticated methods. The breach has compromised various types of sensitive information.