Philippine nuclear research agency data compromised via ownCloud vulnerability

Threat actors exploited CVE-2023-49105 to exfiltrate 372 MB of sensitive data, including nuclear-material records and encryption keys, from a Philippine research institution. The breach highlights ongoing risks to critical infrastructure entities failing to patch known vulnerabilities despite CISA's inclusion of the flaw in its Known Exploited Vulnerabilities catalog.