Oracle Cloud Potential Supply Chain Breach (Incident)
ID: 03fa8797-0e55-50bb-810e-22101ab34846
STIX ID: report--03fa8797-0e55-50bb-810e-22101ab34846
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2025-03-21
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
CloudSEK reported that an actor calling themselves "rose87168" claims to have exfiltrated over 6 million records from Oracle Cloud SSO/LDAP, including key stores and encrypted credentials, and is offering the data for sale; CloudSEK suspects exploitation of a legacy login endpoint possibly tied to CVE-2021-35587, but Oracle denies the breach and there is no independent verification as of the report.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.