Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Threat actors exploited a known vulnerability in ownCloud to breach the Philippines' nuclear agency, gaining access to sensitive systems without requiring patching or updates. The compromise resulted in the theft of reactor databases, personnel records, and stored credentials, highlighting the critical risk posed by delayed security remediation in high-value infrastructure environments.