{"id":6163,"date":"2025-04-18T22:40:08","date_gmt":"2025-04-19T02:40:08","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=6163"},"modified":"2025-04-18T22:39:50","modified_gmt":"2025-04-19T02:39:50","slug":"cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/","title":{"rendered":"CISA flags Oracle breach after silent leak of customer credentials"},"content":{"rendered":"<p class=\"\" data-start=\"86\" data-end=\"463\"><span id=\"input-sentence~0\">In a move that confirms what many feared, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a public warning regarding a breach that compromised Oracle\u2019s public cloud infrastructure\u2014weeks after Oracle initially denied it. The agency is urging Oracle users to reset credentials and scrutinize authentication logs for any signs of unauthorized activity.<\/span><span id=\"input-sentence~1\"><\/p>\n<p>News about the security problem first appeared, and Oracle eventually admitted it happened. The issue was with two old login servers that Oracle did not update. This allowed a hacker to break in and take a large amount of important information.<\/span><span id=\"input-sentence~2\"> The stolen data included encrypted passwords, authentication tokens, and encryption keys. Though Oracle downplayed the breach in a letter to customers, it\u2019s now facing a lawsuit in Texas for allegedly failing to notify affected users in a timely manner.<\/p>\n<p>CISA issued an advisory on Wednesday, calling the breach a potential risk to enterprise systems\u2014especially in cases where organizations reused credentials or embedded them in scripts and applications. The agency stressed the importance of implementing phishing-resistant multi-factor authentication and warned against hardcoding login information into software and infrastructure resources.<\/span><span id=\"input-sentence~3\"><\/p>\n<p>\u201cThe compromise of credential material\u2026 can pose significant risk to enterprise environments,\u201d CISA noted, leaving no room for ambiguity about the stakes involved.<\/p>\n<p>The breach highlights a concerning issue: even the largest tech companies can make mistakes, and when security problems happen, they often don\u2019t inform people right away, or sometimes they don&#8217;t inform them at all.<\/span><span id=\"input-sentence~4\"> This incident strongly reminds customers that, in addition to trusting cloud services, they need to be careful and check everything themselves.<\/p>\n<p>Oracle and CISA have not disclosed further information, and their silence is eloquent. Since we still do not know how serious the breach is, users are now forced to go through their systems, re-evaluate their security practices, and remain vigilant.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a move that confirms what many feared, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a public warning regarding a breach that compromised Oracle\u2019s public cloud infrastructure\u2014weeks after Oracle initially denied it. The agency is urging Oracle users to reset credentials and scrutinize authentication logs for any signs of unauthorized activity. News [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[3587,93,80,1350,2937],"class_list":["post-6163","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cisa","tag-cloud","tag-cybersecurity","tag-oracle","tag-public-cloud"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CISA flags Oracle breach after silent leak of customer credentials - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CISA flags Oracle breach after silent leak of customer credentials - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"In a move that confirms what many feared, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a public warning regarding a breach that compromised Oracle\u2019s public cloud infrastructure\u2014weeks after Oracle initially denied it. The agency is urging Oracle users to reset credentials and scrutinize authentication logs for any signs of unauthorized activity. News [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-19T02:40:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-19T02:39:50+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/\",\"name\":\"CISA flags Oracle breach after silent leak of customer credentials - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2025-04-19T02:40:08+00:00\",\"dateModified\":\"2025-04-19T02:39:50+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CISA flags Oracle breach after silent leak of customer credentials\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CISA flags Oracle breach after silent leak of customer credentials - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/","og_locale":"en_US","og_type":"article","og_title":"CISA flags Oracle breach after silent leak of customer credentials - Web Hosting News","og_description":"In a move that confirms what many feared, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a public warning regarding a breach that compromised Oracle\u2019s public cloud infrastructure\u2014weeks after Oracle initially denied it. The agency is urging Oracle users to reset credentials and scrutinize authentication logs for any signs of unauthorized activity. News [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/","og_site_name":"Web Hosting News","article_published_time":"2025-04-19T02:40:08+00:00","article_modified_time":"2025-04-19T02:39:50+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/","url":"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/","name":"CISA flags Oracle breach after silent leak of customer credentials - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2025-04-19T02:40:08+00:00","dateModified":"2025-04-19T02:39:50+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/cisa-flags-oracle-breach-after-silent-leak-of-customer-credentials\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"CISA flags Oracle breach after silent leak of customer credentials"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":283,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/6163","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=6163"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/6163\/revisions"}],"predecessor-version":[{"id":6164,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/6163\/revisions\/6164"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=6163"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=6163"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=6163"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}