Harvard investigating breach

[erek]

"While Clop would not share details about the attack, they confirmed to BleepingComputer that they were behind the emails and that a new Oracle flaw was exploited in the data theft attacks.

"Soon all will become obvious that Oracle bugged up their core product and once again, the task is on clop to save the day," the extortion gang told BleepingComputer.

Soon after, Oracle confirmed a new zero-day, tracked as CVE-2025-61882, was found in the software and issued an emergency update.

The Clop extortion gang has a long history of exploiting zero-day flaws in massive data theft attacks, including:

• 2020: Exploiting a zero-day in the Accellion FTA platform, affecting nearly 100 organizations.
• 2021: Exploiting a zero-day in SolarWinds Serv-U FTP software.
• 2023: Exploiting a zero-day in the GoAnywhere MFT platform, breaching over 100 companies.
• 2023: Exploiting a zero-day in MOVEit Transfer was Clop's most extensive campaign to date, where a zero-day exploit allowed data theft from 2,773 organizations worldwide.
• 2024: Exploited two Cleo file transfer zero-days (CVE-2024-50623 and CVE-2024-55956) to steal data and extort companies.

Harvard is the first organization linked to the Oracle E-Business Suite zero-day attacks, but we will likely see more listed over the coming days and weeks."

Source: https://www.bleepingcomputer.com/ne...ing-breach-linked-to-oracle-zero-day-exploit/

 

[sfsuphysics]

I swear to to christ if I get a letter from them saying my data may have been stolen when the only data they got from me is when I wasted my money applied to a grad school program over 25 years ago, I seriously will sue them for keeping my data for no good reason all that time

 

[El_Capitan]

Lol, no worries, Oracle will just blame QA. Oh, wait, they fired a lot of them and replaced them with AI.
https://www.theregister.com/2025/09/03/oracle_cuts_more_jobs/
https://erp.today/the-impact-of-ai-powered-automation-on-modernizing-oracle-qa/

 

[philb2]

I swear to to christ if I get a letter from them saying my data may have been stolen when the only data they got from me is when I wasted my money applied to a grad school program over 25 years ago, I seriously will sue them for keeping my data for no good reason all that time

Glad I went to the "other school" down Mass Ave.

 

[sfsuphysics]

Glad I went to the "other school" down Mass Ave.

I'm glad I didn't put myself into massive debt to find out that I don't like doing research for others on projects that have absolutely no interest to me.

 

[uOpt]

The Clop extortion gang has a long history of exploiting zero-day flaws in massive data theft attacks, including:

• 2020: Exploiting a zero-day in the Accellion FTA platform, affecting nearly 100 organizations.
• 2021: Exploiting a zero-day in SolarWinds Serv-U FTP software.
• 2023: Exploiting a zero-day in the GoAnywhere MFT platform, breaching over 100 companies.
• 2023: Exploiting a zero-day in MOVEit Transfer was Clop's most extensive campaign to date, where a zero-day exploit allowed data theft from 2,773 organizations worldwide.
• 2024: Exploited two Cleo file transfer zero-days (CVE-2024-50623 and CVE-2024-55956) to steal data and extort companies.

Harvard is the first organization linked to the Oracle E-Business Suite zero-day attacks, but we will likely see more listed over the coming days and weeks."

Source: https://www.bleepingcomputer.com/ne...ing-breach-linked-to-oracle-zero-day-exploit/

All this garbage "Enterprise" software.

 

[erek]

“Hackers publish personal information stolen during Harvard, UPenn data breaches​

The data published by ShinyHunters, which TechCrunch has seen, appears to match the type of information that both universities said was stolen last year.

The hackers said they published the stolen data because the universities refused to pay a ransom to stop them from doing so. Cybercriminals like ShinyHunters often try to extort their victims asking for payment in exchange for not publishing the data they stole, and if the victims refuse payment, they then release the data online.”

https://techcrunch.com/2026/02/04/h...on-stolen-during-harvard-upenn-data-breaches/

 

[El_Capitan]

Oracle making AI to think like a human, when most humans don't think, and the so-called smart ones think they're smart because they have a degree. Reminds me of when Alan Watts was talking about how scientists were trying to manipulate DNA to create superhumans. The problem is that non-superhumans don't have the capability of knowing what makes a superhuman... because they're not superhuman. So, they just end up creating a lesser version of themselves.