Info Security Magazine
2 weeks, 3 days ago
Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day
Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign
Security news aggregator
Latest coverage for Oracle
Oracle develops databases, cloud services, and business software; vulnerabilities in these products can expose sensitive data and systems.
14
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Oracle is an enterprise technology ecosystem best known in security contexts for Oracle Database, along with Java, application servers, business applications, and cloud services. These products often process sensitive business and personal data, so the tag commonly covers vulnerabilities, insecure configurations, and security updates affecting Oracle software and its integrations.
Material risks include exposed database listeners or management interfaces, excessive privileges, weak authentication, SQL injection, and vulnerable components that may permit unauthorized queries or code execution. Practitioners should inventory Oracle versions and dependencies, apply relevant security updates through controlled testing, restrict network access, enforce least privilege and encryption, and monitor database activity. Advisories should be assessed against the exact product and release, exploit prerequisites, and available mitigations; unsupported versions may remain exposed to known flaws.
Volume over time
Weekly headline count for the current query.
Showing 14 most recent headlines
Filtered view
Info Security Magazine
2 weeks, 5 days ago
US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw
An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting association for the US federal insurance system
Info Security Magazine
3 months, 3 weeks ago
Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds
Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study
Info Security Magazine
7 months ago
US Autoparts Maker LKQ Confirms Oracle EBS Breach
LKQ confirmed that over 9000 individuals saw their personal data compromised because of the breach
Info Security Magazine
7 months, 1 week ago
Barts Health Seeks High Court Ban After Oracle EBS Breach
Barts Health NHS Trust has revealed itself to be the latest victim of Cl0p’s Oracle EBS campaign
Info Security Magazine
7 months, 3 weeks ago
CISA Urges Patch of Actively Exploited Flaw in Oracle Identity Manager
The US cybersecurity agency has added the critical flaw to its Known Exploited Vulnerabilities list
Info Security Magazine
8 months ago
GlobalLogic Becomes Latest Cl0p Victim After Oracle EBS Attack
GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign
Info Security Magazine
9 months, 1 week ago
Google: Clop Accessed “Significant Amount” of Data in Oracle EBS Exploit
GTIG highlighted indicators that Clop is behind the extortion campaign targeting Oracle EBS instances, with its activity likely beginning as early as August 9
Info Security Magazine
9 months, 1 week ago
NCSC: Patch Critical Oracle EBS Bug Now
A critical Oracle E-Business Suite vulnerability is being actively exploited by the Clop ransomware group
Info Security Magazine
9 months, 2 weeks ago
Hackers Target Unpatched Flaws in Oracle E-Business Suite
Patches for the targeted vulnerabilities were released in Oracle’s July 2025 security update
Info Security Magazine
1 year, 5 months ago
Oracle To Address 320 Vulnerabilities in January Patch Update
Critical flaws include those in Oracle Supply Chain products
Info Security Magazine
3 years, 4 months ago
8220 Gang Behind ScrubCrypt Attack Targeting Oracle Weblogic Server
ScrubCrypt malware obfuscates and encrypts applications to evade antivirus detection
Info Security Magazine
3 years, 7 months ago
Oracle Fusion Middleware Vulnerability Actively Exploited in the Wild: CISA
The bug allows unauthenticated attackers with network access to compromise Oracle Access Manager
Info Security Magazine
3 years, 9 months ago
Critical Vulnerability in Oracle Cloud Infrastructure Allowed Unauthorized Access
Potential attacks resulting from it may include privilege escalation and cross–tenant access