Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Oracle attempt to hide cybersecurity incident from customers?

doublepulsar.com

Post reply on HN
Print view View original

21–30 of 136 posts

Re: Oracle attempt to hide cybersecurity incident from customers?

#23

Post by MPSFounder »

lucianbr wrote: post #18
nerdjon wrote: post #7

This is honestly wild. Whether we like it or not security incidents have become such common place in the last several years that if they just admitted to it this entire story would have likely been shrugged off and mostly forgotten about in a couple days but instead it is turning into an entire thing that just seems to be getting deeper and deeper. (Not downplaying the security incident, but that is the unfortunate r…

I'm guessing nobody chooses to work with Oracle anymore for reasons or in situations that we would consider reasonable. It's probably either governments contracts, with or without corruption, companies already locked in, contracts made by executives that don't really understand technology, that sort of thing.

Actually, it is mostly companies who are too reluctant to change. If it works, keep it as is, even if better technologies are the norm nowadays. Maybe this will help them move away from this obsolete Larry Ellison crapshot

Re: Oracle attempt to hide cybersecurity incident from customers?

#26

Post by ziddoap »

neuroelectron wrote: post #20
richwater wrote: post #2

Pretty on par for what I expect from Oracle. I'm surprised there's no corporate contracts involved yet.

The hacker is following a number of corporations. Is it an empty threat or a hint? https://imgur.com/a/IsksRrZ

Neither. I would not read anything into a random hacker's twitter follow list.

Re: Oracle attempt to hide cybersecurity incident from customers?

#27

Post by homiedk »

The troubling aspect is (besides the denials of course) is the absence of controls that should have sniffed this out ASAP. Apparently: - no passive network monitors showing an unknown IP/Mac/Location - no SOAR to kill off the attempts to gain a foothold/move laterally - no alerts on above or anything else in the SOC

Re: Oracle attempt to hide cybersecurity incident from customers?

#29

Post by mrbluecoat »

> NetSuite will indemnify Customer up to an amount equal to five (5) times the equivalent of 12 months of license fees applicable at the time of the event, from and against any Losses incurred by Customer

https://www.sec.gov/Archives/edgar/data/1428669/000119312508...

Post reply on HN