甲骨文就客户电子商务套件遭黑客攻击展开调查

Core Insights - Oracle is investigating multiple incidents of its customers' e-commerce suite applications being compromised following recent ransomware attacks targeting large enterprises [1][4] - The company has identified known security vulnerabilities in its products and issued relevant patches in July [1][4] Group 1: Security Incidents - Oracle's Chief Security Officer, Rob Duhart, confirmed that some customers received ransom emails and advised them to install the latest security updates promptly [4] - A group of hackers claimed to have successfully infiltrated Oracle's e-commerce suite, which is essential for managing core business systems such as finance, supply chain, and customer relationship management [4] Group 2: Ransom Demands - One reported ransom demand reached as high as $50 million, with the hackers allegedly linked to the notorious ransomware group Cl0p [4] - Cl0p has previously targeted large enterprises using malware to encrypt files and demand ransom for access restoration [4] Group 3: Vulnerability Awareness - The vulnerabilities exploited in these attacks were mentioned in Oracle's critical patch update announcement in July, where the company urged customers to install the patches for their e-commerce suite [4] - The U.S. Cybersecurity and Infrastructure Security Agency described Cl0p as one of the largest phishing and malicious spam distribution organizations globally, having reportedly breached over 3,000 U.S. entities and more than 8,000 organizations worldwide [4]