{"uuid": "ab8644c5-a633-4814-9f5e-87a941cdacb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61882", "type": "seen", "source": "https://t.me/pphm_HackerNews/2191", "content": "\ud83d\udd34 Est\u00e9e Lauder Discloses Impact From Oracle EBS Zero-Day Hack\n\nCosmetics giant Est\u00e9e Lauder has started notifying employees that their information was stolen from its Oracle E-Business Suite (EBS) instance last year.\n\nThe incident, the company says, occurred in early August 2025, when the infamous Cl0p cybercrime group started exploiting CVE-2025-61882, a zero-day vulnerability in Oracle EBS that enabled unauthenticated remote code execution (RCE), to exfiltrate data from numerous companies.\n\nIn November, more than 100 companies were listed on the Cl0p leak website, many of which confirmed being impacted by the campaign.", "creation_timestamp": "2026-08-22T00:00:11.546756Z"}