Shipbuilding
Breach intelligence, attack campaigns, and threat reports targeting the Shipbuilding sector.
Explore Other Sectors
Shipbuilding Threat Reports
How Unpatched ownCloud Flaws Led to Philippines Nuclear Agency Espionage
In September 2026, threat actors exploited unpatched vulnerabilities in ownCloud (CVE-2023-49105) and LiteSpeed Cache WordPress plugin (CVE-2024-2800) to breach a Philippine nuclear agency and naval contractor. The attackers, likely Chinese-speaking based on code comments, exfiltrated 9GB of sensitive data including reactor databases, fuel inventories, radiation safety documents, personnel records, and credential stores. Hunt.io researchers discovered the stolen data on an Amsterdam-based server serving as an operational hub for the attackers. This incident reflects escalating cyber threats in the Philippines amid South China Sea tensions, with breach incidents nearly tripling in the first half of 2026. The successful exploitation of vulnerabilities patched over two years ago highlights critical gaps in patch management and security fundamentals at sensitive government facilities.
1 week ago
Kill Chain
ownCloud Vulnerability CVE-2023-49105 Exploited in Philippine Nuclear Espionage Campaign
In August 2026, a Chinese-speaking threat actor exploited CVE-2023-49105, a critical ownCloud WebDAV authentication bypass vulnerability, to steal sensitive nuclear research data from a Philippine research body. The attacker used custom Python scripts to exploit the flaw's pre-signed URL mechanism, downloading 176 files totaling 372 MB including nuclear material records, strategic plans, reactor components, and employee data. The incident also involved a parallel attack on a Philippine marine engineering company serving the Navy, exploiting CVE-2024-28000 in WordPress LiteSpeed Cache plugin, highlighting coordinated cyber espionage targeting Philippine defense and nuclear sectors. This incident underscores the escalating cyber threats targeting critical infrastructure in the Asia-Pacific region amid South China Sea tensions, with state-affiliated actors increasingly focusing on nuclear and defense-related intelligence gathering through unpatched cloud collaboration platforms.
2 weeks ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports