Connect with us

Tech

Oracle patches E-Business suite targeted by Cl0p ransomware | Computer Weekly

Published

on

Oracle patches E-Business suite targeted by Cl0p ransomware | Computer Weekly


Oracle has issued a fix for a critical remote code execution (RCE) vulnerability in its E-Business Suite (EBS) as the well-used ERP software package emerges as the latest vector for mass Cl0p (aka Clop) ransomware attacks.

The Oracle EBS ecosystem is deeply embedded in enterprise financial and operational systems, which offers hackers access to a wide range of high-value targets and potentially extreme impacts.

The flaw in question, CVE-20225-61882, is present in versions 1.2.2.3 through 12.2.14 of EEBS, and affects a concurrent task processing component that enables users to run multiple processes simultaneously.

Rated 9.8 on the CVSS scale, it is considered relatively easy to take advantage of. Importantly, an unauthenticated attacker can exploit it over the network without any user interaction needed, leading to RCE.

Oracle EBS ecosystem, often deeply embedded in financial and operational systems, offers high-value targets with far-reaching business impact

“Oracle always recommends that customers remain on actively-supported versions and apply all Security Alerts and Critical Patch Update security patches without delay.

“Note that the October 2023 Critical Patch Update is a prerequisite for application of the updates in this Security Alert,” the supplier added.

In its advisory notice Oracle shared a number of indicators of compromise (IoCs) that appeared to link exploitation of CVE-2025-61882 to both the Cl0p ransomware crew and the Scattered Lapsus$ Hunters collective – which is not necessarily implausible as Scattered Spider has been known to act as a ransomware affiliate in the past.

Jake Knott, principal security researcher at watchTowr, said that exploitation of EBS appeared to date back to August 2025, and warned that as of Monday 6 October, exploit code for CVE-2025-61882 was publicly available.

“At first glance, it looked reasonably complex and required real effort to reproduce manually. But now, with working exploit code leaked, that barrier to entry is gone. It’s likely that almost no one patched over the weekend. So we’re waking up to a critical vulnerability with public exploit code and unpatched systems everywhere,” said Knott.

“We fully expect to see mass, indiscriminate exploitation from multiple groups within days. If you run Oracle EBS, this is your red alert. Patch immediately, hunt aggressively, and tighten your controls, fast.”

Writing on LinkedIn, Charles Carmakal, chief technical officer and board advisor at Google Cloud’s Mandiant, confirmed this, saying that Cl0p had almost certainly exploited multiple other EBS vulnerabilities – including some that were patched a couple of months ago – as well. The gang has supposedly been contacting victims since early last week, but Carmakal added that it may have not made contact with all of them just yet.

Cl0p’s warning from history

As seen in 2023, when it successfully targeted a flaw in Progress Software’s MOVEit managed file transfer (MFT) software product to extort potentially hundreds of victims, the Cl0p gang makes a habit of conducting mass exploitation activities against multiple downstream organisations through widely-used software packages. The mass targeting of Oracle EBS now being seen does fit this established modus operandi.

Historically, Cl0p’s activity comes in short, high-profile bursts in-between lengthy periods of downtime – likely due to the administrative burden its mass-attacks create – and Kroll managing director of cyber and data resilience, Max Henderson, had been among those warning for some weeks that the gang looked likely to resurface. He told Computer Weekly that others may follow, and described “grim” impacts. 

“There should be an urgent rush for victims and users of Oracle to patch this, as continued attacks or attacks from other groups may continue. We expect a long tail of self-identifying victims with this situation, as many victims are unaware of extortion emails sitting in their junk folders,” said Henderson.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Making sustainable plastic from the carbon dioxide in the ocean

Published

on

Making sustainable plastic from the carbon dioxide in the ocean


Credit: Nature Catalysis (2025). DOI: 10.1038/s41929-025-01416-4

The ocean is Earth’s largest carbon sink, absorbing about 25% of the CO₂ released by human activities. However, this uptake contributes to ocean acidification and risks destabilizing marine ecosystems. Utilizing this carbon resource presents a sustainable alternative to fossil fuels to produce important chemicals and materials, such as plastics.

A system to capture (CO₂) from seawater and convert it into biodegradable plastic precursors has been reported in Nature Catalysis. The findings suggest a potentially sustainable way to produce industrial chemicals.

Chuan Xia and colleagues engineered a two-part system that captures CO₂ from natural seawater with more than 70% efficiency and low energy consumption (around 3 kilowatt-hours per kilogram of CO₂), operating continuously for 536 hours. The carbon capture cost was found to be competitive against current technology, at US$229.9 per ton of CO₂.

First, the CO₂ was converted into pure formic acid using an electrocatalyst. This was then transformed by engineered bacteria, Vibrio natriegens, into succinic acid, which is the starting material needed to prepare poly(butylene succinate), a biodegradable thermoplastic polymer. The researchers achieved production levels of up to 1.37 grams per liter in scaled-up fermenters.

The system could also be used to produce numerous other chemicals from CO₂—for potential use in various products such as fuels, drugs and foods—by further engineering the catalysts used in each part (the electrode and the microorganism), the authors suggest. Although the system shows scalability and stability, further optimization is needed to improve yields and integration for industrial use.

More information:
Chengbo Li et al, Efficient and scalable upcycling of oceanic carbon sources into bioplastic monomers, Nature Catalysis (2025). DOI: 10.1038/s41929-025-01416-4

Citation:
Making sustainable plastic from the carbon dioxide in the ocean (2025, October 6)
retrieved 6 October 2025
from https://techxplore.com/news/2025-10-sustainable-plastic-carbon-dioxide-ocean.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Tech

Solar energy is now the world’s cheapest source of power, study finds

Published

on

Solar energy is now the world’s cheapest source of power, study finds


Credit: Unsplash/CC0 Public Domain

Solar energy is now so cost-effective that, in the sunniest countries, it costs as little as £0.02 to produce one unit of power, making it cheaper than electricity generated from coal, gas or wind, according to a new study from the University of Surrey.

In a study accepted for publication in Energy and Environment Materials, researchers from Surrey’s Advanced Technology Institute (ATI) argue that solar photovoltaic (PV) technology is now the key driver of the world’s transition to clean, renewable power.

Professor Ravi Silva, co-author of the study and Director of the ATI at the University of Surrey, said, “Even here in the U.K., a country that sits 50 degrees north of the equator, solar is the cheapest option for large-scale energy generation.

“Globally, the total amount of solar power installed passed 1.5 terawatts in 2024—twice as much as in 2020 and enough to power hundreds of millions of homes. Simply put, this technology is no longer a moonshot prospect but a foundational part of the resilient, low-carbon energy future that we all want to bring to reality.”

The research team also found that the price of lithium-ion batteries has fallen by 89% since 2010, making solar-plus- as cost-effective as gas power plants. These hybrid setups, which combine with batteries, are now standard in many regions and allow to be stored and released when needed, turning it into a more reliable, dispatchable source of power that helps balance grid demand.

Despite many reasons to be optimistic, the ATI research team points to several challenges—particularly connecting large amounts of solar power to existing electricity networks. In some regions, such as California and China, high solar generation has led to grid congestion and wasted energy when supply exceeds demand.

Dr. Ehsan Rezaee, co-author of the study from the University of Surrey, commented, “Connecting growing levels of solar power to electricity networks is now one of the biggest challenges. Smart grids, artificial intelligence forecasting and stronger links between regions will be vital to keep power systems stable as renewable energy use rises.”

Professor Silva added, “With the integration of energy storage and smart grid technologies, solar is now capable of delivering reliable, affordable and clean power at scale. Innovations in materials such as perovskite solar cells could boost energy output by up to 50% without increasing land use.

“However, progress will depend on consistent, long-term policy support. Initiatives such as the Inflation Reduction Act in the US, the EU’s REPowerEU plan and India’s Production Linked Incentive scheme show how clear direction can drive investment and innovation. Sustained commitment and will be essential if we are to accelerate the world’s transition to a clean and reliable energy system.”

More information:
Ehsan Rezaee et al, Solar Energy in 2025: Global Deployment, Cost Trends, and the Role of Energy Storage in Enabling a Resilient Smart Energy Infrastructure (2025). DOI: 10.22541/au.175647950.09188768/v1

Citation:
Solar energy is now the world’s cheapest source of power, study finds (2025, October 6)
retrieved 6 October 2025
from https://techxplore.com/news/2025-10-solar-energy-world-cheapest-source.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Tech

I’ve Tested Countless Mesh Systems. Here Are the Routers I Recommend

Published

on

I’ve Tested Countless Mesh Systems. Here Are the Routers I Recommend


Performance was consistently good throughout my home, with some of the fastest speeds I have recorded at close and medium range. My top pick, the Orbi 770 Series, outperformed the BE67 in some scenarios. By default, the 6-GHz band is a separate SSID, appended _6GHz, and MLO is switched off. I joined with my Pixel 10 Pro XL, and after multiple speed tests at close range (up to 8 feet away), I generally got download speeds around 100 Mbps faster than on the 5-GHz band, but this dropped sharply with distance. The range of 6 GHz is significantly shorter, and just one room over, the signal strength was visibly weaker than that of 5 GHz. If you want to take advantage of 6 GHz for wireless backhaul, you can’t have the routers too far apart or with too many obstacles, or you will have dead zones. I don’t think the coverage is as wide as TP-Link suggests, though much depends on your home; the Orbi 770 offered slightly better range for me.

Disappointingly, the free tier of HomeShield offers only limited security, and Security+ costs $5 a month or $36 a year for web and intrusion protection with notifications and reports, while Total Security costs $70 a year for the first year ($130 per year after) and adds antivirus for devices, VPN service, and a password manager. Advanced Parental Controls require a second subscription costing $3 a month or $18 a year for time limits, downtime scheduling, rewards, app time limits, safe search, insights, and reports. Quality of Service allows you to prioritize specific devices and set bandwidth allowances. There is also a mixed-mode security option for WPA2 and WPA3. You can also split the 2.4-GHz and 5-GHz bands and create guest or IoT networks.

The Deco app and web interface are solid but fairly limited in terms of options. The app was able to identify many of the devices on my network, but this required me to share data with a third party. There is now an option to run a speed test on the router to see what your ISP delivers, which is handy. Ultimately, this three-pack gave me reliable and speedy internet throughout my home and garden.

Deco App via Simon Hill

6 Best Mesh WiFi Systems  Tested in a Tech Reviewer's Home

Deco App via Simon Hill

6 Best Mesh WiFi Systems  Tested in a Tech Reviewer's Home

Deco App via Simon Hill

TP-Link does have far too many similar mesh systems, though, and I run through some of the alternatives below. Performance and price-wise, the BE67 falls between the BE63 and the flagship BE85, and I think it’s the sweet spot in TP-Link’s line-up for most people. The Deco BE68 is the same system as the BE67, but exclusive to Best Buy.


Best Wi-Fi 6 Mesh

  • Photograph: Simon Hill

  • Photograph: Simon Hill

  • Photograph: Simon Hill

WIRED

  • Excellent Wi-Fi 6 performance
  • Generous ports
  • Subscription-free security software and parental controls

TIRED

  • Setup and configuration can be fiddly
  • Firmware sometimes buggy

The combination of speedy performance, impressive range, and lots of extra features earns the Asus ZenWiFi XT8 the title of best Wi-Fi 6 mesh system. (Even if it’s a bit of a mouthful.) I tested the two-pack, and the straightforward setup through the mobile app took minutes, though you have to keep the node close by during setup and then move it. This is a tri-band Wi-Fi 6 system with one 2.4-GHz band and two 5-GHz bands (one is reserved for wireless backhaul). Available in black or white, these units are fairly large, but they’re unobtrusive and look classy, with side vents to help dissipate heat. Each router offers three gigabit Ethernet ports, which is generous, as well as a 2.5 gigabit WAN port and a USB 3.1 port.

At short, medium, or long range, the XT8 was consistently one of the fastest systems I tested, and speeds never dropped. The inclusion of AiProtection Pro, which adds anti-malware and parental controls powered by Trend Micro, is very welcome, especially since it doesn’t require a subscription, unlike most competitors. Just remember that using AiProtection means sharing your data with Trend Micro, so you might want to read its privacy policy. I like the parental controls, too. You can set up and reuse profiles, schedule bedtimes, filter by age group, and review activity. The Quality of Service (QoS) option lets you prioritize activities like working from home, gaming, or streaming, and you can limit bandwidth for specific devices.



Source link

Continue Reading

Trending