Hello and welcome to the Monday, October 6, 2025 edition of the Sands and at Storm centers,

Stormcast. My name is Johannes Ulrich, recorded today from Denver, Colorado. And this episode

is brought you by the Sands.edu graduate certificate program in cloud security.

Well, to start out with, we have some bad news for users of Oracle's e-business suite.

Last week, I think it was Wednesday, Thursday.

There was news coming up that many companies using Oracle's e-business suite did receive letters, emails

from the Klopp ransomware gang stating that their Oracle E-Business suite had been compromised

and, well, that data had been stolen.

Oracle shortly after, yeah, their chief security officer did publish a blog post

stating that they assume that the vulnerability being exploited here is a vulnerability

patched as part of Oracle's critical patch update in June. So as long as you had that applied,

well, you should be good. Then save from

any exploitation, pretty much should disregard this ransom note. Well, on Saturday, Oracle changed

its stance on this. Oracle did publish an additional patch for its e-business suite,

this patch fixes a vulnerability with a C-Bissor of 9.8.

According to Oracle, the vulnerability does allow the execution of arbitrary code

across the network without any authentication.

So certainly one of the sort of kind of worst case scenarios.

And that apparently is what's behind these letters emails from the Klop ransomware gang.

So if you received one of those emails stating that your data may have been compromised,

first of all, take it serious, assume it's real, and, well, switch to instant response mode.

This should be your highest priority on Monday.

...