Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

Threat actors have begun actively exploiting a critical vulnerability in Oracle E-Business Suite's Payments component that carries a severity score of 9.8 out of 10. The flaw, which Oracle patched in late May, allows unauthenticated attackers to completely take over the Payments system via HTTP, and security firm Defused detected the first exploitation attempts over the weekend through its honeypots. Organizations are strongly urged to apply Oracle's patches immediately, as the company's enterprise products have a history of being targeted in major attack campaigns, including recent breaches by ransomware groups affecting hundreds of companies.