A recent cyberattack targeted a nuclear agency in the Philippines, exploiting long-unpatched vulnerabilities in widely used software, leading to the theft of sensitive data such as reactor databases and personnel records. Researchers identified that a threat group accessed information through an ownCloud server hosted in Amsterdam. The attackers had access to around 1.2 GB of data, with indications that up to 9 GB might have been exfiltrated.
The incident underscores the rising cybersecurity threat landscape in the Philippines, amidst increasing political tensions in the South China Sea. The report suggests that organizations must enhance their security measures, emphasizing the need for regular patching and robust configurations to safeguard against similar threats.