Global Cybercrime Disrupted by 'Operation Endgame'; Cl0p Breaches Entrust with Oracle Zero-Day

The Cl0p ransomware group has claimed responsibility for breaching digital security firm Entrust. The attack exploited a critical, unpatched zero-day vulnerability in Oracle's E-Business Suite, now identified as CVE-2025-61882. This remote code execution flaw carries a CVSS score of 9.8 and allows for unauthenticated access. Oracle issued a patch in its October 2025 Critical Patch Update. This development provides specific technical details for the previously unspecified Oracle vulnerabilities exploited by Cl0p and adds a significant new victim to the ongoing campaign, increasing the overall severity and clarity of the threat.

The Windows Kernel zero-day, CVE-2025-62215, has been assigned a CVSS score of 7.0 (High), confirming its significant impact. Microsoft's own threat intelligence teams reportedly identified and reported the vulnerability, indicating internal awareness of its active exploitation. This reinforces the critical need for immediate patching across all affected Windows systems, as the flaw allows local attackers to achieve SYSTEM-level privileges. No new attack vectors or additional victims have been reported, but the detailed CVSS score provides further context on the vulnerability's severity.