Oracle

Oracle rolls out monthly security patch updates

May 5, 2026

Oracle is changing how its security fixes are delivered: starting in May 2026, there will be a monthly Critical Security Patch Update. “Each [monthly] CSPU is smaller …

VirtualBox 7.2.8 is out with Linux kernel 7.0 support and crash fixes

April 21, 2026

Oracle shipped VirtualBox 7.2.8 on April 21, 2026, as a maintenance release covering crashes, networking problems, clipboard issues, and extended Linux kernel compatibility. …

Unbreakable Enterprise Kernel 8.2 ships with confidential computing support, XFS live repair

March 26, 2026

Many enterprise Linux deployments rely on hardware-level memory isolation to protect sensitive workloads from co-tenants and compromised hypervisors. Oracle’s …

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

March 23, 2026

Oracle has released an out-of-band patch for a critical and easily exploitable vulnerability (CVE-2026-21992) in Oracle Identity Manager and Oracle Web Services Manager. The …

Java 26 ships with new cryptography API and HTTP/3 support

March 19, 2026

Oracle released JDK 26, the 17th consecutive feature release delivered under the six-month cadence the project adopted in 2018. The release includes ten JDK Enhancement …

OpenAI Frontier organizes AI agents under one system

February 5, 2026

OpenAI introduced Frontier, a platform designed to organize AI agents that perform business tasks within internal systems and workflows. The platform connects data from …

Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884)

October 12, 2025

Oracle has revealed the existence of yet another remotely exploitable Oracle E-Business Suite vulnerability (CVE-2025-61884). About CVE-2025-61884 CVE-2025-61884 is a …

Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882)

October 7, 2025

Resecurity and watchTowr researchers have analyzed the leaked scripts used by attackers to exploit CVE-2025-61882 on internet-facing Oracle ESB instances. Whether the …

Cl0p exploits Oracle E-Business Suite zero-day in data theft, extortion campaign (CVE-2025-61882)

October 6, 2025

The Cl0p extortion gang exploited multiple Oracle E-Business Suite (EBS) vulnerabilities, including one zero-day flaw (CVE-2025-61882), “to steal large amounts of data …

Oracle customers targeted with emails claiming E-Business Suite breach, data theft

October 2, 2025

Unknown attackers claiming affiliation with the Cl0p extortion gang are hitting business and IT executives at various companies with emails claiming that they have exfiltrated …

Oracle Linux 9 Update 5 brings security updates, OpenJDK 17, .NET 9.0

November 20, 2024

Oracle Linux offers a secure, streamlined platform for deploying and managing applications across on-premises, cloud, and edge environments. Designed for demanding workloads, …

Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287)

November 19, 2024

Oracle has released a security patch for CVE-2024-21287, a remotely exploitable vulnerability in the Oracle Agile PLM Framework that is, according to Tenable researchers, …