NCSC: Patch Critical Oracle EBS Bug Now

Oracle released an emergency patch for CVE-2025-61882 — a critical unauthenticated RCE in Oracle E-Business Suite — after reports that the Clop ransomware group exploited it as a zero-day and the exploit was subsequently leaked, prompting urgent recommendations to patch, perform compromise assessments using Oracle-published IoCs, and reduce public exposure of EBS instances.