Cl0p ransomware extortion gang have a zero day in Oracle E-Business Suite (component: BI Publisher Integration) - which they’ve been exploiting since last month to steal data.
Uncategorized
8
Posts
3
Posters
0
Views
-
Cl0p ransomware extortion gang have a zero day in Oracle E-Business Suite (component: BI Publisher Integration) - which they’ve been exploiting since last month to steal data.
-
Cl0p ransomware extortion gang have a zero day in Oracle E-Business Suite (component: BI Publisher Integration) - which they’ve been exploiting since last month to steal data.
A few days ago Oracle, via the media, blamed their own customers for not installing a July security update.. then when the media coverage stopped, quietly released a new security update for the actual exploited vulnerability. 🥴
-
A few days ago Oracle, via the media, blamed their own customers for not installing a July security update.. then when the media coverage stopped, quietly released a new security update for the actual exploited vulnerability. 🥴
The details for the Oracle hack are as embarrassing as you'd imagine..
../
-
The details for the Oracle hack are as embarrassing as you'd imagine..
../
Here's the original Oracle explanation - before the post mysteriously disappeared (even from Internet Archive etc).
-
Here's the original Oracle explanation - before the post mysteriously disappeared (even from Internet Archive etc).
The craziest part of the Oracle story is they got the exploit chain via... LAPSUS$.
Before Oracle had an advisory, on Telegram LAPSUS$ posted a working zero day exploit - dated May 2025.
Yes, the teenagers at LAPSUS$ know more about Oracle's security vulnerabilities than Oracle.
-rw-r----- 1 root root 3713 Jun 15 18:19 exp.py
-rw-r--r-- 1 root root 2749 Oct 3 14:54 readme.md
-rw-r----- 1 root root 2651 May 16 10:07 server.py -
The craziest part of the Oracle story is they got the exploit chain via... LAPSUS$.
Before Oracle had an advisory, on Telegram LAPSUS$ posted a working zero day exploit - dated May 2025.
Yes, the teenagers at LAPSUS$ know more about Oracle's security vulnerabilities than Oracle.
-rw-r----- 1 root root 3713 Jun 15 18:19 exp.py
-rw-r--r-- 1 root root 2749 Oct 3 14:54 readme.md
-rw-r----- 1 root root 2651 May 16 10:07 server.pyHaving large corporations pay hundreds of millions of US dollars in Bitcoin to teenagers to cover up their data breaches is fucking stupid by the way, as said teens then spend the bitcoin on exploits* - we're in a race to the bottom to arm teens with rocket launchers.
* one of the LAPSUS kids also allegedly ordered pizza to his nans house with bitcoin
APTs aren't nation states anymore, they're Advanced Persistent Teenagers as covering up breaches has lowered the bar. Global gov inaction.
-
Having large corporations pay hundreds of millions of US dollars in Bitcoin to teenagers to cover up their data breaches is fucking stupid by the way, as said teens then spend the bitcoin on exploits* - we're in a race to the bottom to arm teens with rocket launchers.
* one of the LAPSUS kids also allegedly ordered pizza to his nans house with bitcoin
APTs aren't nation states anymore, they're Advanced Persistent Teenagers as covering up breaches has lowered the bar. Global gov inaction.
@GossiTheDog I'm using a screenshot of your post in a story today. Thanks!
-
@GossiTheDog I'm using a screenshot of your post in a story today. Thanks!
omg path canonicalization is one of the first things we fixed in honey danber uucp … in 1983
-
undefined Oblomov shared this topic on
Gli ultimi otto messaggi ricevuti dalla Federazione
-
RE: https://mastodon.social/@arstechnica/115510254014124189
I try to be nice and I'm not an AI.
Or, at least, I don't think so. 😂
-
-
Un simbolo perfetto di un sistema che si tutela sempre — ma solo dall’alto. 3/3
#Cnel #Brunetta #Casta #PoliticaItaliana #Salari #PubblicaAmministrazione #Economia #Italia
-
#stipendialti, i #tetti cadono in fretta.
La #Consulta ha abolito il limite dei 240mila euro per i dirigenti pubblici, e il Cnel non ha perso tempo a “riallinearsi”.
Le opposizioni parlano di “vittoria della casta” e di un segnale sbagliato nel momento peggiore: l’Italia cresce poco, i salari reali restano fermi, ma le poltrone pubbliche si rivalutano.In un Paese in cui milioni di persone lavorano con #stipendidafame, la scelta del Cnel suona come una provocazione istituzionale. 2/n
-
@FraEmme 🤍
-
#Cnel, la casta non conosce crisi.
Scatta la bufera #politica
Mentre il Paese discute di #salariominimo e di come far quadrare i #contipubblici, il Cnel (Consiglio nazionale dell’economia e del lavoro) approva una delibera che raddoppia i compensi dei suoi vertici: da 850mila euro a quasi 1,9 milioni.
Il presidente #RenatoBrunetta incassa un aumento da 250mila a 310mila euro annui. Tutto “nel rispetto della legge”, certo. Ma il messaggio politico è devastante: quando si tratta di 1/n
@attualita
-
@Perla_13 GRAZIEEEEE L'HO MESSO UN PAIO DI GIORNI FA, MI PIACE MOLTO!!!!
-
I had 3 people come up and say they signed up for Fediverse accounts today. I haven't ever directly asked people to join during a talk; I guess it helps to have that direct invitation. #seagl2025
