CISA Weighs In on Alleged Oracle Cloud Breach

CISA has issued an advisory about potential unauthorized access to a legacy Oracle Cloud environment after researchers reported a WebLogic zero-day exploit and an alleged theft of 6 million records. Oracle initially denied a breach and later said only two obsolete servers were involved with no usable customer data exposed; the scope remains unconfirmed. CISA recommends immediate mitigations such as resetting passwords, reviewing source code, enabling phishing-resistant MFA, and monitoring logs.