Oracle pushes a patch for a dangerous zero-day under active exploitation by one of the most notorious ransomware gangs around.

This story was originally published on Cybersecurity Dive. To receive daily news and insights, subscribe to our free daily Cybersecurity Dive newsletter. A hacking campaign targeting Oracle E-Business ...

Mandiant researchers said Clop ransomware is indeed linked to a series of emails threatening to release stolen data.

Oracle E-Business Suite attack confirmed to be the work of Cl0p and Oracle has admitted that a zero-day has been exploited.

On October 4, 2025, Oracle released an advisory to address a critical vulnerability, CVE-2025-61882, affecting E-Business Suite (EBS) systems, versions 12.2.3 through 12.2.14.

Strap in, admins. Exploits began in August and now the code is out there Security boffins say the Clop cybercriminal gang has been rummaging through Oracle's E-Business Suite (EBS) for months – and ...

Big Red rushes out patch for 9.8-rated flaw after crooks exploit it for data theft and extortion Oracle rushed out an emergency fix over the weekend for a zero-day vulnerability in its E-Business ...