Cl0p extortion campaign via Oracle E-Business Suite zero-day (CVE-2025-61882) ยท updates https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882 Cl0p-branded extortion emails reached executives from September 29, 2025, claiming theft of Oracle E-Business Suite data. Mandiant tied the campaign to exploitation of an unauthenticated RCE in EBS (SyncServlet), patched as CVE-2025-61882 for EBS 12.2.3 to 12.2.14. A separate July UiServlet SSRF campaign was later tracked as CVE-2025-61884. en Mon, 20 Oct 2025 00:00:00 GMT Cl0p extortion campaign via Oracle E-Business Suite zero-day (CVE-2025-61882): CISA adds the related EBS SSRF flaw CVE-2025-61884 to KEV https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882 https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882#2025-10-20-70eaac1a Mon, 20 Oct 2025 00:00:00 GMT critical <p><a href="https://www.bleepingcomputer.com/news/security/cisa-confirms-hackers-exploited-oracle-e-business-suite-ssrf-flaw/">Source</a></p> Cl0p extortion campaign via Oracle E-Business Suite zero-day (CVE-2025-61882): CISA adds CVE-2025-61882 to KEV https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882 https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882#2025-10-06-3bb98978 Mon, 06 Oct 2025 00:00:00 GMT critical <p>Cl0p extortion campaign via Oracle E-Business Suite zero-day (CVE-2025-61882): CISA adds CVE-2025-61882 to KEV</p> Cl0p extortion campaign via Oracle E-Business Suite zero-day (CVE-2025-61882): Oracle publishes a Security Alert for CVE-2025-61882 https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882 https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882#2025-10-04-531b0254 Sat, 04 Oct 2025 00:00:00 GMT critical <p><a href="https://www.oracle.com/security-alerts/alert-cve-2025-61882.html">Source</a></p> Cl0p extortion campaign via Oracle E-Business Suite zero-day (CVE-2025-61882): Cl0p-branded extortion emails start arriving at executives https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882 https://pwn.watch/i/oracle-ebs-cl0p-extortion-cve-2025-61882#2025-09-29-bed0868f Mon, 29 Sep 2025 00:00:00 GMT critical <p><a href="https://cloud.google.com/blog/topics/threat-intelligence/oracle-ebusiness-suite-zero-day-exploitation">Source</a></p>