Over the course of three months in 2025, hackers exploited vulnerabilities in Oracle E-Business Suite to exfiltrate Social ...

“We offer all our security features baked into the cloud, so we don’t make the customers choose between cost and security,” Oracle VP of Software Bala Chandran said. The new capabilities are built on ...

Oracle had initially disclosed the vulnerability earlier this month, though without providing any details about exploitation. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ...

Oracle has confirmed that the threat actor group Cl0p is actively exploiting a zero-day vulnerability in the Oracle E-Business Suite product, versions 12.2.3-12.2.14. On October 4, 2025, Oracle ...

The disclosure follows reports that the cybercriminal group Clop has been extorting a significant number of E-Business Suite customers. Oracle is now linking a widespread data extortion campaign ...

Ransomware group Clop exposed birth dates, bank account information and social security numbers using a zero-day ...

The fallout from Oracle's latest zero-day (CVE-2025-61882) continues to spread, with Harvard University recently disclosing it suffered a data leak stemming from an attack targeting the flaw. The ...

The CISA KEV catalog was expanded with 245 vulnerabilities in 2025, including 24 flaws exploited by ransomware groups.