CISA Flags Old ownCloud Flaw After Reported Philippine Nuclear Data Theft

Researchers linked exploitation of ownCloud CVE-2023-49105 (CVSS 9.8) to the theft of sensitive Philippine nuclear research data after attackers abused default/misconfigured pre-signed WebDAV URLs to access and exfiltrate files; Hunt.io recovered scripts and roughly 176 files (~372 MB) including reactor data, personnel records, a KeePass DB and BitLocker recovery key, and CISA added the CVE to its Known Exploited Vulnerabilities catalog. The report urges affected parties to upgrade/patch (ownCloud 10.13.3 or specific patch), verify signing-key configuration, and review historical access/WebDAV logs to detect retrospective compromise.