Security news aggregator

Latest coverage for Oracle

Oracle develops databases, cloud services, and business software; vulnerabilities in these products can expose sensitive data and systems.

8 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Oracle is an enterprise technology ecosystem best known in security contexts for Oracle Database, along with Java, application servers, business applications, and cloud services. These products often process sensitive business and personal data, so the tag commonly covers vulnerabilities, insecure configurations, and security updates affecting Oracle software and its integrations.

Material risks include exposed database listeners or management interfaces, excessive privileges, weak authentication, SQL injection, and vulnerable components that may permit unauthorized queries or code execution. Practitioners should inventory Oracle versions and dependencies, apply relevant security updates through controlled testing, restrict network access, enforce least privilege and encryption, and monitor database activity. Advisories should be assessed against the exact product and release, exploit prerequisites, and available mitigations; unsupported versions may remain exposed to known flaws.

Showing 8 most recent headlines Filtered view
Bank Info Security 9 months, 2 weeks ago

Oracle Sees No Zero-Day Exploits Tied to Customer Extortion

Data-Grabbing Attacks Appear to Compromise Organizations Without July Patch UpdateOracle has confirmed reports that its customers are being targeted by data-stealing extortionists. Experts said attackers appear to be exploiting E-Business Suite customers who haven't yet installed patches released by Oracle in July to fix critical, remotely exploitable vulnerabilities.

More from Bank Info Security 4 Oct 2025, 2:30 a.m. 0-Day Compromise Exploit Extortion Oracle Patch Theft Vulnerability
Bank Info Security 9 months, 2 weeks ago

Extortionists Claim Mass Oracle E-Business Suite Data Theft

Executives Receiving Ransom Demands of Up to $50 Million, Warns Ransomware ExpertExtortionists are shaking down executives at organizations that use Oracle E-Business Suite, claiming to have stolen their sensitive data and demanding ransoms of up to $50 million, multiple cybersecurity firms are warning. The criminals claim to be associated with the Clop ransomware group.

More from Bank Info Security 3 Oct 2025, 3:00 a.m. Clop Oracle Ransom Ransomware Theft Warning

Extortion emails name-drop Big Red's E-Business Suite, though Google and Mandiant yet to find proof of any breach Criminals with potential links to the notorious Clop ransomware mob are bombarding Oracle execs with extortion emails, claiming to have stolen sensitive data from Big Red's E-Business Suite, according to researchers.…

More from The Register 3 Oct 2025, 1:45 a.m. Breach Clop Extortion Google Oracle Ransomware Research Theft