ownCloud flaw exploited to steal nuclear data from a Philippine research institution

CISA added the critical ownCloud vulnerability CVE-2023-49105 to its Known Exploited Vulnerabilities catalog after reports that a Chinese-speaking threat actor used it against a nuclear research body in the Philippines. The attacker is estimated to have downloaded 176 files totaling about 372 MB from the organization.