Cox Enterprises discloses Oracle E-Business Suite data breach

Cox Enterprises just fessed up to a nasty data breach where hackers exploited a zero-day vulnerability in Oracle’s E-Business Suite, snagging personal info from over 9,000 folks after slipping in undetected back in August 2025—though they didn’t catch on until late September. The culprits? The notorious Cl0p ransomware gang, who pounced on this unpatched flaw (CVE-2025-61882) well before Oracle dropped a fix in early October, adding Cox to their growing list of victims on the dark web alongside big names like Logitech and the Washington Post. It’s a stark reminder that even massive outfits with $23 billion in revenue aren’t immune to these opportunistic attacks, especially when zero-days lurk in critical business software. For SMBs and MSPs, this underscores the need to stay vigilant with regular vulnerability scans and rapid patching—don’t wait for the other shoe to drop like Cox did. And hey, if you’re using Oracle tools, double-check those updates and consider bolstering your incident response plans to keep your operations from turning into a hacker’s playground.

Source: https://www.bleepingcomputer.com/news/security/cox-enterprises-discloses-oracle-e-business-suite-data-breach/