negativeSYS.SOURCE: The Hacker News• 2026-08-28T21:26:55+05:30

Critical ownCloud Vulnerability Exploited in Cyber Espionage Attack on Philippine Nuclear Research Institution

#vulnerability #cyber espionage #data breach #web security

A critical WebDAV API authentication bypass vulnerability (CVE-2023-49105) in ownCloud was exploited by a Chinese-speaking threat actor to steal sensitive nuclear research data from a Philippine institution. The attack involved unauthenticated file access via pre-signed URLs and exfiltration of 176 files, including strategic plans and database dumps.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines.

The vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of

Read original article

*** END OF TRANSMISSION ***

> ANALYSIS OF SUMERIAN KING LIST CORRELATION WITH PALEOCLIMATE EVENTS > PPWR REGULATORY CHANGES IMPACT SMALL TABLETOP RPG PUBLISHERS IN EU MARKETS > 9TH CIRCUIT RULES IN FAVOR OF STATES IN KALSHI GAMBLING DISPUTE > ENHANCING LLMS WITH DATALOG FOR STRUCTURED PROGRAM ANALYSIS IN VULNERABILITY RESEARCH > CHINESE AUTOMAKERS INVEST IN HUMANOID ROBOTICS AS PROFIT DRIVER, FOLLOWING TESLA'S LEAD > VIRTUAL IPHONE BOOTSTRAPPING USING APPLE'S VIRTUALIZATION.FRAMEWORK > EVALUATING XREAL A01 SMART GLASSES FOR CINEMATIC VIEWING EXPERIENCE > AI-DRIVEN DETECTION OF COUNTERFEIT COSMETICS VIA IMAGE ANALYSIS > BERLIN REJECTS RANSOM DEMANDS AFTER STATE NETWORK DATA BREACH BY RHYSIDA GROUP > CRITICAL COSMOS EVM VULNERABILITY EXPLOITED DESPITE KNOWN RISK> ANALYSIS OF SUMERIAN KING LIST CORRELATION WITH PALEOCLIMATE EVENTS > PPWR REGULATORY CHANGES IMPACT SMALL TABLETOP RPG PUBLISHERS IN EU MARKETS > 9TH CIRCUIT RULES IN FAVOR OF STATES IN KALSHI GAMBLING DISPUTE > ENHANCING LLMS WITH DATALOG FOR STRUCTURED PROGRAM ANALYSIS IN VULNERABILITY RESEARCH > CHINESE AUTOMAKERS INVEST IN HUMANOID ROBOTICS AS PROFIT DRIVER, FOLLOWING TESLA'S LEAD > VIRTUAL IPHONE BOOTSTRAPPING USING APPLE'S VIRTUALIZATION.FRAMEWORK > EVALUATING XREAL A01 SMART GLASSES FOR CINEMATIC VIEWING EXPERIENCE > AI-DRIVEN DETECTION OF COUNTERFEIT COSMETICS VIA IMAGE ANALYSIS > BERLIN REJECTS RANSOM DEMANDS AFTER STATE NETWORK DATA BREACH BY RHYSIDA GROUP > CRITICAL COSMOS EVM VULNERABILITY EXPLOITED DESPITE KNOWN RISK