topic Re: Oracle Cloud breach may impact 140,000 enterprise customers in Threats

Oracle Cloud breach may impact 140,000 enterprise customers

Caute_cautim — Mon, 31 Mar 2025 21:28:32 GMT

Hi All

A threat actor has targeted the login infrastructure of Oracle Cloud, exploiting middleware vulnerability, and demanding ransom from over 140,000 tenants.

Don't pay the ransom!

https://www.csoonline.com/article/3852643/oracle-cloud-breach-may-impact-140000-enterprise-html

Regards

Caute_Cautim

Re: Oracle Cloud breach may impact 140,000 enterprise customers

denbesten — Tue, 01 Apr 2025 20:35:15 GMT

Oracle continues to deny there has been a breach, yet (anonymous) customers have confirmed the disclosed creds did belong to them and were uniquely used with Oracle.

Re: Oracle Cloud breach may impact 140,000 enterprise customers

denbesten — Tue, 08 Apr 2025 04:51:50 GMT

And now, oracle is starting to fess up. The fundamental problem appears to be their failure to apply their own security patches on a timely basis. The vulnerability has a 9.8 (out of 10) CVSS score.

So much for the theory that one of the primary advantages of using a manufacturer's own cloud infrastructure is that they have advance notice and can apply maintenance even before the patch is publicly released.