Oracle Cloud Denies It Has Been Breached
A hacker called rose87168 has recently claimed to have stolen more than 6 million data records, including user credentials, from Oracle Cloud, which could affect more than 140,000 customers.
Now, cyber security firms are taking measures to protect customers and their own networks after claims of a massive attack against Oracle Cloud.
While the previously unknown hacked has claimed responsibility for the breach, Oracle has firmly denied it has any security issues.
Indeed, argument has intensified between Oracle and security researchers following allegations that hackers accessed this sensitive data from the company’s Cloud federated Single Sign-On (SSO) service. After initially releasing strong denials, Oracle has been silent, while security researchers have compiled evidence backing claims of an actual attack.
These conflicting stories risk generating confusion for Oracle's customers, creating uncertainty about whether to take urgent security measures or trust the company's assurances that no breach occurred.
If Oracle is aware of any indicators connected to this incident, even without confirming a breach, the company should provide guidance, metadata or other information that customers can use to validate potential exposure. This could include login time-stamps, user agent anomalies, or IP ranges linked to suspicious access. Meanwhile, cyber security providers are assessing the potential impacts across their networks and advising customers to take precautionary measures until Oracle can deliver clear guidance.
When there's a lack of information or delayed communication, it becomes increasingly difficult for potentially vulnerable users to react in time to protect themselves. Incidents like this demonstrate just how, with modern technology supply chains, risks don't arise from from technical vulnerabilities, they also arise from the speed at which they are able to respond.
@rose87168 | Bleeping Computer | CyberSecurityDive | Computing | Dark Reading | CloudSEK |
Image: Ideogram
You Might Also Read:
CISA Finds Serious Problems In Oracle & Mitel Systems:
If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.
- Individual £5 per month or £50 per year. Sign Up
- Multi-User, Corporate & Library Accounts Available on Request
- Inquiries: Contact Cyber Security Intelligence
Cyber Security Intelligence: Captured Organised & Accessible
