Oracle’s Data Breach Denial Unravels As Leaked Info Checks Out

Despite Oracle’s denial of a breach affecting its Oracle Cloud federated SSO login servers, Bleeping Computer has confirmed with multiple companies that data samples shared by the threat actor are authentic. 

Recently, a threat actor, “rose87168,” claimed to be selling six million records, including sensitive account data, on dark web forums.  

CloudSEK’s investigation suggests the breach may have exploited a known security flaw, possibly allowing unauthorized…