Oracle Cloud Breach: 6 Million Records Stolen, Cybersecurity Firms on Alert
Cybersecurity Dive
|
Contributed by: Drex DeFord
Summary
Cybersecurity firms are increasing vigilance following allegations of a significant breach involving Oracle Cloud, where an attacker is said to have stolen 6 million data records, including user credentials for over 140,000 customers. Despite Oracle's initial denials, evidence from security researchers suggests a critical vulnerability was exploited, prompting firms like Rapid7 to assess potential impacts. Rapid7, while reporting minimal use of Oracle Cloud, is proactively rotating credentials for test accounts as a precaution. Researchers from CloudSEK are analyzing data linked to the breach to verify claims and underscore the ongoing security risks related to the identified vulnerability.