Oracle Cloud security SNAFU latest: IT giant accused of pedantry as evidence scrubbed
ID: bb828596-7be4-55f1-a382-99a295b4be55
STIX ID: report--bb828596-7be4-55f1-a382-99a295b4be55
Feed Name: The Register (Security)
Threat Score
Report of alleged Oracle security incidents: an online actor claims to have accessed Oracle login/SSO systems and exfiltrated millions of records (encrypted SSO/LDAP passwords, certificates, and customer data). Independent researchers validated sample data and linked the intrusion to the unpatched CVE-2021-35587 in Oracle Access Manager; Oracle has publicly denied a breach while investigations and a civil lawsuit are underway.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.