Harvard University Breached in Oracle Zero-Day Attack

Harvard confirmed it was impacted by active exploitation of an unauthenticated zero-day in Oracle E-Business Suite (CVE-2025-61882) that has been attributed to the Clop ransomware group; Oracle released an emergency patch and later disclosed a related EBS vulnerability (CVE-2025-61884) while authorities and security vendors urged immediate mitigation as the campaign involves data exfiltration and has affected multiple customers.