#oracle-ebs

[ follow ]
#vulnerability-chaining #ransomware #goanywhere-mft #cve-2025-61882 #wordpress-compromise #strela-stealer
fromThe Hacker News
2 weeks ago

Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Dozens of Orgs Impacted by Exploitation of Oracle EBS Flaw - Dozens of organizations may have been impacted following the zero-day exploitation of a security flaw in Oracle's E-Business Suite (EBS) software since August 9, 2025, according to Google Threat Intelligence Group (GTIG) and Mandiant. The activity, which bears some hallmarks associated with the Cl0p ransomware crew, is assessed to have fashioned together multiple distinct vulnerabilities, including a zero-day flaw tracked as CVE-2025-61882 (CVSS score: 9.8), to breach target networks and exfiltrate sensitive data.
Information security
Information security
fromThe Hacker News
3 weeks ago

Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More

Cl0p-linked actors actively exploit a critical Oracle E-Business Suite zero-day for large-scale data theft while stealthy groups use compromised WordPress sites to deliver information-stealers.
[ Load more ]