[joepa]

Oracle says: hack is fake news https://www.bleepingcomputer.com/news/se...a-records/.

@rose87168 : any evidence to show that the data is real and recent?

[tsuki]

If he really wasn't able to breach the system, how would he have managed to upload this file inside Oracle's infrastructure?

https://web.archive.org/web/202503011615...ed/x.txt?x

I checked the list of companies I know that use Oracle Cloud, and the information matches perfectly. I believe there's still a lot of this story left to be uncovered. Honestly, the delay in Oracle's official response to this incident already says a lot.

[d0xo]

I have verified users from serveral companies.

But all of them have renewed SSO tokens, PWs, Hashes, Certs etc.

So by providing the list of companies you made sure everyone can do the changes needed and not worry any longer.

[d0xo]

Rose is selling email addresses

Why the fuck do you keep bitching about this here with a just-created account? You might need to up your fucking PR instead of trying to claim that your security is based on anything other than your fucking legal team.

When was your account created?

[DaisyF]

Wow - my head is spinning.

[FernsArise23]

Bro that's crazy tbh.

[apt28]

cve-2021-35587 ?

[Somewutt]

Oracle’s denial could mean they think it was either a honeypot system, or non-sensitive. What do you guys think?

Oracle is a big company. It will take them days to investigate. The truth will come out soon.

Who will be on the winning team? Oracle? or @rose87168 ?

You have a point. Rose and CloudSEK are winning so far after they shared new samples. They even made a shiekh release their version and now quoting it. I see oracle losing for now

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: brainrot

[An0n2024]

Great Job, Let me shake your hand, poet to poet

[IONENERGYTR566]

[quote="tsuki" pid='1159129' dateline='1742851937']
如果他真的無法攻破系統，他怎麼能設法將這個檔案上傳到 Oracle 的基礎架構內部？

https://web.archive.org/web/202503011615...ed/x.txt?x

我查看了我所知道的使用 Oracle Cloud 的公司列表，資訊完全匹配。我相信這個故事還有許多內容有待揭開。老實說，Oracle 官方對此事的回應延遲已經說明了許多問題。
[/引用]

如何做？有模板嗎？