ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

A critical security flaw in ownCloud has been added to the US Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog. The vulnerability was exploited by a Chinese-speaking threat actor to steal nuclear records from a research body in the Philippines. The flaw has a high CVSS score of 9.8, indicating a significant level of severity. The vulnerability is tracked as CVE-2023-49105. This incident highlights the vulnerability's potential for exploitation by malicious actors. The US agency's addition of the flaw to its catalog suggests that it is being actively exploited in the wild.