Oracle refutes breach after hacker claims 6 million data theft

A hacker known as “rose87168” claims to have stolen six million records from Oracle Cloud servers. The stolen data includes Java Key Store (JKS) files, encrypted Single Sign-On (SSO) passwords, hashed LDAP passwords, key files, and Enterprise Manager Java Platform Security (JPS) keys.

• Alert
• Hot Topic
• International

CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day

By infosecbulletin / Wednesday , May 7 2025

Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an attempted attack against an organization...

Read More

• Alert

Hacker exploited Samsung MagicINFO 9 Server RCE flaw

By infosecbulletin / Wednesday , May 7 2025

Hackers are exploiting an unauthenticated remote code execution vulnerability in the Samsung MagicINFO 9 Server to take control of devices...

Read More

• Alert

CISA adds Langflow flaw to its KEV catalog

By infosecbulletin / Tuesday , May 6 2025

CISA added the Langflow vulnerability, CVE-2025-3248 (CVSS score 9.8), to its Known Exploited Vulnerabilities catalog. Langflow is a popular tool...

Read More

• Alert
• Vulnerabilities

Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers

By infosecbulletin / Tuesday , May 6 2025

Google has released its monthly Android security updates, addressing 46 vulnerabilities, including one that has been actively exploited. CVE-2025-27363 (CVSS...

Read More

• Event

UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition

By infosecbulletin / Tuesday , May 6 2025

The Cyber Security Club, representing the Department of Computer Science and Engineering at the University of Asia Pacific (UAP), has...

Read More

• Alert

xAI Dev Leaks API Key for Private SpaceX, Tesla & Tweeter

By infosecbulletin / Monday , May 5 2025

A major security issue happened at Elon Musk’s AI company, xAI, when a developer accidentally posted a private API key...

Read More

• Alert
• Vulnerabilities

SonicWall Exploit Chain Exposes Admin Hijack Risk via 2 CVEs

By infosecbulletin / Monday , May 5 2025

A new exploit chain for SonicWall's Secure Mobile Access (SMA) appliances has been released by watchTowr Labs. It details how...

Read More

• Hot Topic

TikTok fined €530 million for sending E.U. Data to China

By infosecbulletin / Friday , May 2 2025

Ireland's Data Protection Commission fined TikTok €530 million ($601 million) on Friday for violating data protection laws by transferring European...

Read More

• Hot Topic

Microsoft New Accounts Go Passwordless By Default

By infosecbulletin / Friday , May 2 2025

Microsoft is focusing on eliminating password-based authentication, promoting passwordless sign-in and sign-up methods instead. For the past decade, Microsoft has...

Read More

• Alert
• Vulnerabilities

SonicWall Patched for SSRF Vulnerability in SMA1000 Appliances

By infosecbulletin / Friday , May 2 2025

SonicWall's Product Security Incident Response Team (PSIRT) has released a critical update for its SMA1000 series appliances due to a...

Read More

Stolen Data on Dark Web Forums:

Stolen data is being advertised on dark web forums like Breach Forums. A user named “Rose87168” is demanding ransom from affected organizations to keep their data private.

In the email exchange, rose87168 said they asked Oracle to pay 100,000 XMR for information on how they breached the servers, but the company allegedly refused to pay after asking for “all information needed for fix and patch, BleepingComputer reported.

Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company’s Oracle Cloud federated SSO login servers.

“There has been no breach of Oracle Cloud. The published credentials are not for the Oracle Cloud. No Oracle Cloud customers experienced a breach or lost any data,” Oracle statement reads. 

Since January 2025, “rose87168” has shown advanced techniques in carrying out this attack. The hacker claims to have accessed the stolen data about 40 days before posting it online.

Source: CNBC, BleepingComputer