Search: “philippines”

48 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 208 Ransomware 102 Vulnerability 78 Threat actor 74 Phishing & fraud 64 Data breach 50 Exploit / PoC 48 Policy & legal 37 Industry 32 Advisory 9 Research 4 AI tools & infra 1 Model release 1

SeverityAll critical 214 high 268 medium 120 low 104 info 2

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

A Chinese-speaking actor exploited ownCloud CVE-2023-49105 to steal 176 nuclear research files from Philippine organizations, prompting CISA to add the flaw to KEV.

CISA added CVE-2023-49105 (CVSS 9.8), an ownCloud WebDAV API authentication bypass fixed in version 10.13.1, to the KEV catalog after Hunt.io found an open directory hosting custom Python exploit scripts and tools including Sliver, Metasploit, and Mettle. The actor downloaded 176 files (~372 MB) from a Philippine nuclear research body, including nuclear-material account records, 2023-2028 strategic plans, BitLocker keys, and a KeePass database; a second intrusion exploited LiteSpeed Cache CVE-2024-28000 at a shipbuilding firm serving the Philippine Navy, with XML-RPC brute-force and an EtherHiding/ClickFix component. FCEB agencies must patch by August 30, 2026. CISA also added Linux Kernel CVE-2026-53362 and Artifactory CVE-2026-66384 after OpenAI said its AI agents exploited them against internal infrastructure.

The Hacker NewsAug 28, 15:56 UTC · 18d agoExploit / PoC in the wildCVE-2023-49105 CVE-2024-28000 CVE-2026-53362+1 CVEs1

Flaw in Philippines’ contact-tracing app served up data on 30K health care providers, research finds

CyberScoopNov 11, 16:24 UTC · Nov 11, 2020Exploit / PoC in the wild

China accused of launching 'cyber war' over contested islands

CyberScoopAug 15, 12:30 UTC · Aug 15, 2016Exploit / PoC in the wild

Suspected Chinese hackers target telecoms, research in Taiwan, Recorded Future says

CyberScoopJul 8, 21:26 UTC · Jul 8, 2021Exploit / PoC in the wild

Stuxnet & Duqu, update on cyber weapons usage

Security AffairsOct 11, 11:09 UTC · Oct 11, 2017Exploit / PoC

Despite its hacking prowess, Russia appears to have very messy networks

CyberScoopJul 18, 16:59 UTC · Jul 18, 2017Exploit / PoC in the wild

Meta cracks down on millions of accounts it tied to pig

CyberScoopNov 21, 18:00 UTC · Nov 21, 2024Exploit / PoC in the wild

Federal agencies recommend blocking Hong Kong-US undersea cable over national security concerns

CyberScoopJun 18, 12:10 UTC · Jun 18, 2020Exploit / PoC in the wild

U.S. charges five in scheme to swindle millions from military personnel

CyberScoopAug 21, 18:41 UTC · Aug 21, 2019Exploit / PoC in the wild

Recently uncovered PowerPool Group used recent Windows 0

Security AffairsSep 6, 20:01 UTC · Sep 6, 2018Exploit / PoC

Army launches new office to accelerate cyber weapon development

CyberScoopSep 1, 12:00 UTC · Sep 1, 2016Exploit / PoC in the wild

IT threat evolution in Q2 2016. Overview

Kaspersky SecurelistAug 11, 10:57 UTC · Aug 11, 2016Exploit / PoC CVE-2015-2545 CVE-2016-1010 CVE-2016-0147

Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch

PaperCut pre-auth RCE CVE-2026-81578 actively exploited; 47% of tracked installs unpatched and exposed to remote code execution.

Huntress confirmed active exploitation of a pre-authentication RCE flaw in PaperCut (CVE-2026-81578), chainable with CVE-2026-82078 to achieve SYSTEM-level code execution via PaperCut's Application Server. Observed attacks focused on short reconnaissance (whoami, ver, tasklist) with no persistence, but a malicious Java class dropping into the installation directory leaves the jdbc:derby:memory:pwn breadcrumb. Roughly 47% of ~2,500 tracked installations run version 23 or earlier with no patch yet available.

Security AffairsSep 6, 08:17 UTC · 10d agoExploit / PoC in the wildCVE-2026-81578 CVE-2026-82078