Back Securityaffairs.Co

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

Securityaffairs.Co •Pierluigi Paganini • August 29, 2026

An alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive data. A suspected Chinese-speaking operator targeted a Philippine nuclear research body and a marine engineering company that supports the Philippine Navy, using well-known vulnerabilities in internet-facing ownCloud and WordPress systems. The activity was uncovered after Hunt.io found an exposed […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Operator Breaches Philippine Nuclear and Naval Entities A suspected Chinese-speaking operator has compromised a Philippine nuclear research body and a marine engineering company supporting the Philippine Navy by exploiting known vulnerabilities. The attacker utilized CVE-2023-49105, an authentication-bypass flaw in ownCloud, allowing unauthorized access to sensitive files, including nuclear material registries and personal information of officials. Additionally, CVE-2024-28000 was exploited in the WordPress site of the marine engineering company. Hunt.io discovered an exposed server containing attack scripts and logs, indicating a significant data breach. The stolen data is estimated to be around 9 GB, with critical documents related to nuclear safety and operational plans. The incident highlights the ongoing cyber threats to critical infrastructure in the Philippines amidst rising geopolitical tensions. The attack was reported on August 31, 2026, after a responsible disclosure process by Hunt.io. 5 sources 81

Extracted Entities

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

The full story

Extracted Entities

Attack Types (1)

Domains (1)

MITRE ATT&CK (2)

Platforms (2)