ORACLE E-BUSINESS SUITE ZERO-DAY EXPLOITED IN WIDESPREAD EXTORTION CAMPAIGN

Summary from the TLDR InfoSec newsletter

A threat actor linked to the CL0P group exploited a previously unknown vulnerability in Oracle E-Business Suite, stealing sensitive data from targeted organizations and launching a mass extortion email campaign. Attackers leverage sophisticated multi-stage Java payloads and compromised third-party accounts. Although Oracle issued critical emergency patches to mitigate the risk, this is still being actively exploited.