CybersecuritySoftwareTechnology

Oracle E-Business Suite Vulnerability Actively Exploited in Ransomware Campaigns

Federal cybersecurity authorities have confirmed active exploitation of a high-severity Oracle E-Business Suite vulnerability in ransomware campaigns. The server-side request forgery flaw allows unauthorized access to sensitive resources without authentication.

Federal Cybersecurity Agency Confirms Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially confirmed that a vulnerability affecting Oracle E-Business Suite customers is being actively exploited in ransomware attacks, according to reports released Monday. The agency has added the vulnerability, tracked as CVE-2025-61884, to its catalog of known exploited vulnerabilities, indicating confirmed malicious use by threat actors.

AIBusinessCybersecurity

AI Fraud Detection Systems Evolve to Reduce False Positives and Protect Legitimate Businesses

Businesses face growing challenges from overly aggressive fraud detection systems that mistakenly flag legitimate operations. New AI solutions are emerging that can distinguish between actual fraud and lawful activity, with some companies reporting false positive reductions up to 60%.

The Rising Cost of False Positives

Artificial intelligence systems designed to prevent fraud are increasingly causing collateral damage to legitimate businesses, according to industry reports. Sources indicate that companies operating in sectors like CBD, telehealth, gaming, crypto, and alternative finance frequently face account freezes and higher transaction fees despite operating legally. Analysts suggest that automated fraud systems often treat unfamiliar patterns as dangerous, leading to significant business disruptions.

CybersecuritySecurityTechnology

Russian Coldriver Hackers Launch Sophisticated ‘NoRobot’ Malware Campaign

Russian intelligence-linked hackers have shifted to a new malware family called NoRobot after their previous LostKeys malware was exposed. The sophisticated attack chain uses fake CAPTCHA pages to trick targets into downloading malicious files. Security analysts report this represents a significant escalation in the group’s operational tempo.

Russian Hackers Deploy New Malware Suite

The Russian-affiliated hacking collective Coldriver has been observed deploying a sophisticated new malware set, according to researchers at the Google Threat Intelligence Group. The report states this new malware family, tracked as NoRobot, appears to have replaced the group’s previous primary malware LostKeys since it was publicly disclosed in May 2025.