Threat Research

Beginning in late September 2025, a threat actor linked to the CL0P extortion group launched a large-scale campaign targeting organizations using Oracle E-Business Suite (EBS)....

CVE-2025-61882 is a critical remote code execution vulnerability in Oracle E-Business Suite that can be exploited without authentication. Oracle urges users to apply the latest patches immediately, ensuring the October 2023 Critical Patch Update is already in place....