Oracle has linked an ongoing extortion campaign claimed by the Clop ransomware gang to E-Business Suite (EBS) vulnerabilities that were patched in July 2025.

Oracle has confirmed that some of its customers have received extortion emails and the attackers may have exploited known vulnerabilities.

Oracle has advised customers that hackers may be exploiting vulnerabilities in unpatched instances of its E-Business Suite (EBS). This follows a warning by the Google Threat Intelligence Group (GTIG) ...

The data extortion campaign targeting Oracle E-Business Suite customers is connected to vulnerabilities addressed by the company in July, Oracle disclosed.