Oracle Cloud breach may impact 140,000 enterprise customers

[Caute_cautim]

Hi All

A threat actor has targeted the login infrastructure of Oracle Cloud, exploiting middleware vulnerability, and demanding ransom from over 140,000 tenants.

Don't pay the ransom!

https://www.csoonline.com/article/3852643/oracle-cloud-breach-may-impact-140000-enterprise-html

Regards

Caute_Cautim

[denbesten]

Oracle continues to deny there has been a breach, yet (anonymous) customers have confirmed the disclosed creds did belong to them and were uniquely used with Oracle.  

[denbesten]

And now, oracle is starting to fess up.  The fundamental problem appears to be their failure to apply their own security patches on a timely basis.  The vulnerability has a 9.8 (out of 10) CVSS score.

So much for the theory that one of the primary advantages of using a manufacturer's own cloud infrastructure is that they have advance notice and can apply maintenance even before the patch is publicly released.