CrowdStrike Identifies Campaign Targeting Oracle E-Business Suite via Zero-Day Vulnerability Tracked as CVE-2025-61882

A critical zero-day vulnerability in Oracle E-Business Suite (EBS) is being actively exploited in the wild. The flaw enables unauthenticated RCE, and threat actor GRACEFUL SPIDER is suspected to be behind a mass exploitation campaign.