Everything You Need to Know About Oracle Cloud Security Incident by rose87168

Allegations surfaced that threat actor "rose87168" breached Oracle Cloud in mid-February 2025, exfiltrating roughly 6 million records (including key material and encrypted credentials) from login endpoints and offering samples for sale and extortion; investigators cite possible exploitation of CVE-2021-35587 or an undisclosed flaw, while Oracle initially denied a breach but later began notifying some customers, leaving the incident partially corroborated but with serious operational impact and ongoing investigations.