Cybersecurity09/24/2026@CyberDesk
Oracle Issues Emergency Patch for E-Business Suite Zero-Day CVE-2025-61882
2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United StatesOracle
Starts 10/04/2025CONFIRMED 88% CONFIDENCE355 days agoOracle's^[1][2] Security Alert Advisory CVE-2025-61882 lists '2025-October-04 Rev 1. Initial Release' in its modification history.
Oracle's out-of-band Security Alert fixed a 9.8-rated, no-login remote code execution flaw in E-Business Suite that Cl0p had exploited to steal data.
0.76

CISA's^[1][2] alert of 'October 06, 2025' adds 'CVE-2025-61882 Oracle^[4] E-Business Suite Unspecified Vulnerability'; the KEV catalog entry sets dateAdded 2025-10-06 and dueDate 2025-10-27 under BOD 22-01, which 'requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date'.

Start: Oct 6, 202590% CONFIDENCEfrom the source
End: Oct 27, 202590% CONFIDENCEfrom the source

CISA Orders Federal Agencies to Patch Oracle E-Business Suite Zero-Day

CISA put CVE-2025-61882 on its Known Exploited Vulnerabilities list, giving federal civilian agencies until 27 October 2025 to fix Oracle E-Business Suite.

On 6 October 2025 CISA added CVE-2025-61882, the Oracle E-Business Suite flaw behind the Cl0p data-theft campaign, to its Known Exploited Vulnerabilities catalog^[1].
Binding Operational Directive 22-01 requires federal civilian executive branch agencies to remediate listed flaws by the due date^[1]; the catalog set it at 27 October 2025 and marks the flaw as used in ransomware campaigns^[2].
The required action is to apply Oracle's mitigations, follow BOD 22-01 guidance for cloud services, or stop using the product^[2].
Oracle's 4 October alert covers E-Business Suite 12.2.3 to 12.2.14 and rates the bug 9.8^[4].
CISA added the second E-Business Suite flaw, CVE-2025-61884, on 20 October with a 10 November deadline, after BleepingComputer confirmed Oracle's fix blocked the exploit leaked by ShinyHunters^[2][3].

@CyberDesk

References 490% CONFIDENCE

The first entry is always the pin's source. Overall confidence is a weighted average of how firmly each reference supports the start and end times used above; a reference counts half as much for every 180 days older than the newest.

[1]90%
cisa.gov/news-events/alerts/2025/10/06/cisa-adds-seven-known-exploited-vulnerabilities-catalog
cisa.gov· Posted Sep 24, 2026· Starts Oct 6, 2025 ✓· Ends Oct 27, 2025 ✓· 40% of score
CISA's^[2] alert of 'October 06, 2025' adds 'CVE-2025-61882 Oracle^[4] E-Business Suite Unspecified Vulnerability'; the KEV catalog entry sets dateAdded 2025-10-06 and dueDate 2025-10-27 under BOD 22-01, which 'requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date'.
[2]92%
CISA Known Exploited Vulnerabilities Catalog (JSON feed)
cisa.gov· Published Sep 23, 2026· 39% of score
The catalog entry for CVE-2025-61882: dateAdded 2025-10-06, dueDate 2025-10-27, known ransomware campaign use 'Known'; CVE-2025-61884 added 2025-10-20, due 2025-11-10.^[1]
[3]84%
CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw
bleepingcomputer.com· Published Oct 21, 2025· 11% of score
CISA^[1][2] then added CVE-2025-61884 and required agencies to patch it by 10 November 2025; recaps the two EBS campaigns.
[4]90%
Oracle Security Alert Advisory - CVE-2025-61882
oracle.com· Published Oct 4, 2025· 10% of score
Oracle's alert for the flaw CISA^[1][2] listed: unauthenticated remote code execution in E-Business Suite 12.2.3-12.2.14.

Suggest a correction

Something missing or wrong? Say it in your own words: a link that backs this pin up, a different start or end date and why, or a fact it lacks or gets wrong. The AI checks it against this pin's sources, searches for better ones, and adds any page that backs you up. The pin's own sources still count most.

Comments

Thread

Respond to this Pin

Cybersecurity09/24/2026@CyberDesk
Oracle Issues Emergency Patch for E-Business Suite Zero-Day CVE-2025-61882
2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United StatesOracle
Starts 10/04/2025CONFIRMED 88% CONFIDENCE355 days agoOracle's^[1][2] Security Alert Advisory CVE-2025-61882 lists '2025-October-04 Rev 1. Initial Release' in its modification history.
Oracle's out-of-band Security Alert fixed a 9.8-rated, no-login remote code execution flaw in E-Business Suite that Cl0p had exploited to steal data.
0.76

Cybersecurity09/24/2026@CyberDesk

Oracle Releases Its October 2026 Critical Patch Update

2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United States

Oracle

Starts 10/20/2026SCHEDULED 75% CONFIDENCEin 26 daysOracle's^[1] Critical Patch Updates page: 'Critical Patch Updates are released on the third Tuesday of January, April, July, and October. The next four dates are: 20 October 2026, 19 January 2027, 20 April 2027, 20 July 2027.'

Oracle's quarterly bundle of security fixes across its on-premises products is due on the third Tuesday of October.

0.71

Law09/24/2026@LawDesk

Oracle E-Business Suite Breach Suits Consolidated in Austin

United States Courthouse, 501, West 5th Street, Warehouse District, Austin, Travis County, Texas, 78701, United States

Oracle

Starts 01/05/2026CONFIRMED 86% CONFIDENCE262 days agoThe order in No. 1:25-cv-01805-ADA-SH is 'SIGNED on January 5, 2026' by Susan Hightower, United States Magistrate Judge.^[1]

A federal magistrate judge combined 33 class actions over the Cl0p theft of Oracle E-Business Suite data into In re Oracle Corporation Data Breach Litigation.

0.66

Cybersecurity09/24/2026@CyberDesk

Oracle Issues Emergency Fix for PeopleSoft Zero-Day Hit by ShinyHunters

2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United States

Oracle

Starts 06/10/2026CONFIRMED 88% CONFIDENCE106 days agoOracle's^[1] Security Alert Advisory CVE-2026-35273 lists '2026-June-10 Rev 1. Initial Release' in its modification history.

Oracle's Security Alert for CVE-2026-35273, a 9.8-rated no-login remote code execution flaw in PeopleSoft PeopleTools, came as ShinyHunters stole data from over 100 organizations, mostly universities.

0.64

Software09/24/2026@TechDesk

GSA Signs OneGov Deal Giving Agencies 75% Off Oracle Licenses

General Services Administration, 1800, F Street Northwest, Golden Triangle, Ward 2, Washington, District of Columbia, 20037, United States

Oracle

07/07/2025 - 11/30/2025CONFIRMED 90% CONFIDENCE1.2 years agoGSA^[1], 7 July 2025: "Today ... GSA announced a significant OneGov agreement with Oracle", offering the discounts and OCI access "through November 2025".

The General Services Administration's OneGov agreement gave every federal agency a 75% discount on Oracle's licensed technology, cheaper OCI and no egress fees, priced on the whole government's volume.

0.63

Law09/24/2026@LawDesk

Oracle Health Breach Suits Consolidated in Kansas City Federal Court

Charles Evans Whittaker U.S. Courthouse, 816, Locust Street, Central Downtown, Downtown Kansas City, Kansas City, Jackson County, Missouri, 64106, United States

Oracle

Starts 06/30/2025CONFIRMED 89% CONFIDENCE1.2 years agoThe Order Consolidating Cases in No. 25-00259-CV-W-BP is signed 'Date: June 30, 2025' by Beth Phillips, Chief Judge, 'following a telephone conference with the parties held June 30, 2025'.^[1]

Chief Judge Beth Phillips combined 17 patient class actions against Cerner, doing business as Oracle Health, into In re: Cerner/Oracle Data Breach Litigation.

0.61

Cybersecurity09/24/2026@CyberDesk

Cl0p Starts Emailing Executives Claiming Oracle E-Business Suite Data Theft

2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United States

Oracle

Starts 09/29/2025CONFIRMED 87% CONFIDENCE360 days agoGoogle^[1] Threat Intelligence Group: 'Beginning Sept. 29, 2025, Google Threat Intelligence Group (GTIG) and Mandiant began tracking a new, large-scale extortion campaign by a threat actor claiming affiliation with the CL0P extortion brand.'

A group using the Cl0p extortion brand began mass-emailing executives, saying it had stolen data from their companies' Oracle E-Business Suite systems and demanding payment.

0.60

Cybersecurity09/23/2026@CyberDesk

Microsoft's September 2026 Patch Tuesday Fixes a Record 966 Flaws

MicrosoftOne Microsoft Way, Redmond, United States

Starts 09/08/2026 5:00PMCONFIRMED 87% CONFIDENCE16 days agoStated as firm, per bleepingcomputer.com^[1] (8 September 2026): "Today is Microsoft's^[6] September 2026 Patch Tuesday"; the time is Microsoft Learn's "second Tuesday of each month, typically at 10:00 AM Pacific Time", 17:00 UTC under daylight time.

Microsoft's largest security update ever patches 966 vulnerabilities, including two Windows privilege-escalation zero-days already exploited in attacks and 105 rated Critical.

0.60

Labour09/23/2026@EconDesk

Oracle Begins New Round of Layoffs With 6 a.m. Emails

Oracle2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United States

Starts 09/14/2026CONFIRMED 84% CONFIDENCE10 days agoBusiness Insider^[1], published 2026-09-14, says "Oracle has started a new round of layoffs, according to three people impacted and an email shared with Business Insider. The layoffs had been expected to begin on Monday"; The Register^[3] (14 Sep 2026) says reports "began appearing on social media early Monday".

Oracle began another round of layoffs, telling staff by early-morning email that it was their last working day, days after adding about $700 million to its AI-era restructuring plan.

$700M

0.59

Health09/24/2026@HealthDesk

VA Restarts Its Oracle Federal EHR Rollout at Four Michigan Hospitals

United States Department of Veterans AffairsBattle Creek VA Medical Center, 5500, Armstrong Road, Battle Creek, Kalamazoo County, Michigan, 49083, United States

Starts 04/11/2026CONFIRMED 86% CONFIDENCE166 days agoVA release: "Federal EHR went live April 11 at the VA Ann Arbor Healthcare System, VA Battle Creek Medical Center, VA Detroit Healthcare System, and the VA Saginaw Healthcare System."^[1]

After a three-year pause, the VA switched its Ann Arbor, Battle Creek, Detroit and Saginaw medical centres to the Oracle Health-built Federal EHR on one day, the first of 13 deployments planned for 2026.

0.59

Law09/24/2026@LawDesk

CISPE Sues EU Commission to Annul Broadcom-VMware Merger Approval

Court of Justice of the European Union (General Court), Boulevard Konrad Adenauer, Kirchberg, 2514 Luxembourg

Broadcom

Starts 07/23/2025CONFIRMED 85% CONFIDENCE1.2 years agoThe Official Journal notice is headed "Action brought on 23 July 2025 - CISPE^[3][4][5] v Commission (Case T-503/25)"; CISPE's release dated 24 July 2025 says it filed "today", but the Court's record of the lodging day wins; no time is published.

Cloud-provider lobby CISPE asked the EU General Court (Case T-503/25) to annul the Commission's 12 July 2023 clearance of Broadcom's acquisition of VMware (Case M.10806). It argues the Commission failed to assess the deal's effects on server virtualisation software, bundling and innovation.

0.59

Labour09/24/2026@EconDesk

Oracle Starts a Global Layoff Round With 6 a.m. Termination Emails

Oracle2300, Oracle Way, Lakeshore, Austin, Travis County, Texas, 78741, United States

Starts 03/31/2026CONFIRMED 88% CONFIDENCE177 days agoGeekWire^[1] (31 March 2026): Oracle is laying off employees in Washington 'according to a filing Tuesday from the state Employment Security Department'; the Mirror via AOL^[5] (31 March) says staff 'received termination emails around 6 a.m. on Tuesday'.

Oracle staff in several countries were told by early-morning email that it was their last working day, as WARN notices went in for Seattle and four California sites.

0.59

More like this

References 490% CONFIDENCE

Suggest a correction

Comments

Thread

More like this