ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html?m=1

98 points · 5 comments · view on lemmy.world

5 Comments

irmadlad@lemmy.world · 17 pts · 7d (3 replies)

The scripts targeted an ownCloud instance operated by a nuclear research body

Maybe it's just me, but I think if I were running a nuclear research facility, I'd want a little something more than ownCloud, and neat as it is.

robber@lemmy.ml · 14 pts · 7d (2 replies)

Yeah right? At least a layer of VPN on top.

tired_n_bored@lemmy.world · 12 pts · 6d (1 reply)

I host pictures of my cat and I have everything encrypted and the server is accessible only via VPN

Dangerhart@lemmy.zip · 0 pts · 5d

This is the way

Allero@lemmy.today · 10 pts · 5d

So:

  • They had nuclear records
  • They expose the server to the Internet
  • They don't update their software since 2023

What the hell did they expect?