#oracle-e-business-suite
#oracle-e-business-suite
[ follow ]
#cve-2025-61882 #clop #cl0p #data-breach #extortion #ransomware #cve-2025-61884 #zero-day-exploitation #zero-day
fromIT Pro
1 month agoOracle patches EBS amid extortion attacks
And over the weekend, exploit code for the recently patched flaw was made public, making it even easier for other attackers to make use of it. "It's likely that almost no one patched over the weekend," noted Jake Knott, principal security researcher at watchTowr. "So we're waking up to a critical vulnerability with public exploit code and unpatched systems everywhere. Based on the evidence, we believe this is Cl0p activity, and we fully expect to see mass, indiscriminate exploitation from multiple groups within days."
Information security
fromTechCrunch
1 month agoClop hackers caught exploiting Oracle zero-day bug to steal executives' personal data | TechCrunch
The security advisory said the bug, tracked officially as CVE-2025-61882, can be "exploited over a network without the need for a username and password." The advisory provided several so-called indicators of compromise to help Oracle customers identify evidence of hackers on their systems, suggesting that hackers are currently exploiting the vulnerability to steal customers' sensitive data. Oracle says thousands of organizations around the world use its E-Business Suite to run their companies, including storing their customer data and their employee's human resources files.
Information security
Information security
fromSecurityWeek
1 month agoOracle Says Known Vulnerabilities Possibly Exploited in Recent Extortion Attacks
Extortion emails targeting Oracle E-Business Suite customers indicate possible exploitation of vulnerabilities fixed in Oracle's July 2025 Critical Patch Update; Cl0p and FIN11 links suspected.
[ Load more ]