Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cl0p Oracle E-Business Suite zero-day extortion campaign

Campaign
First reported
Last updated
Happening score
H score 37
1 unique sources, 1 articles

Summary

Hide ▲

The Cl0p ransomware and extortion group is running an Oracle E-Business Suite extortion campaign that used zero-day vulnerabilities to access data from more than 100 organizations. The operation targets customers of the enterprise management software and shows broad exposure across a widely used business platform. Its scale makes the campaign a systemic risk for organizations using Oracle EBS.

Related Happenings

Oracle PeopleSoft broad zero-day exploitation campaign

Exploitation Wave
H score82 First: 29.06.2026 13:00 Last: 29.06.2026 13:00 Sources 1

About this happening: A broad PeopleSoft zero-day exploitation campaign exposed multiple organizations to compromise after attackers abused a previously unknown Oracle PeopleSoft vulnerabilit...

Open Happening

Oracle Identity Manager and Oracle Web Services Manager unauthenticated RCE (CVE-2026-21992)

Vulnerability
H score42 First: 20.03.2026 20:48 Last: 20.03.2026 20:48 Sources 1

About this happening: Oracle issued an out-of-band update to fix CVE-2026-21992, a critical unauthenticated remote code execution flaw in Oracle Identity Manager and Oracle Web Servic...

Open Happening

Madison Square Garden hit by network compromise linked to Cl0p

Incident
H score38 First: 02.03.2026 15:53 Last: 02.03.2026 15:53 Sources 1

How related: Madison Square Garden has confirmed being impacted by a data breach stemming from a cybercrime campaign targeting customers of Oracle’s E-Business Suite (EBS) solution.

About this happening: Madison Square Garden confirmed a data breach that exposed names and SSNs, and it has started notifying affected people. The compromise involved a hosted Oracle E-Bu...

Open Happening

ZAST.AI $6 million Pre-A funding round

Industry Action
H score15 First: 10.02.2026 13:40 Last: 10.02.2026 13:40 Sources 1

About this happening: ZAST.AI completed a $6 million Pre-A funding round backed by Hillhouse Capital, giving the cybersecurity vendor more capital to scale its AI-powered code security plat...

Open Happening

TikTok U.S. joint venture under September 2025 executive order

Public Sector Action
H score77 First: 23.01.2026 13:30 Last: 23.01.2026 13:30 Sources 1

About this happening: The U.S.-backed TikTok USDS Joint Venture LLC now lets TikTok keep operating in the U.S., changing ownership and security oversight for a platform used by over 200 m...

Open Happening

Timeline

  1. 02.03.2026 15:53 2 articles · 4mo ago

    Cl0p Oracle E-Business Suite zero-day extortion campaign

    Initial Disclosure

    The operation began by exploiting zero-day vulnerabilities in Oracle E-Business Suite to reach customer data at scale. That initial access established a broad extortion campaign affecting a shared enterprise platform.

    Show sources
    Open in new tab