Story perspectives

Harvard Cyberattack: Clop Group Exploits Oracle Vulnerability

10/18/2025

Summary

Harvard Cyberattack Response

Harvard University confirmed a cyberattack exploited a zero-day in Oracle E-Business Suite linked to the Clop group (CVE-2025-61882) enabling remote access.
Clop claims it stole data from a small Harvard administrative unit.
The FBI warned organizations to patch this vulnerability immediately.
Envoy Air, a subsidiary of American Airlines, was also compromised via the same Oracle flaws.
Cybersecurity experts urge urgent patching as ransomware tactics evolve.

Summary

Wits Cyberattack Investigation

The University of the Witwatersrand (Wits) confirmed involvement in a global cyberattack exploiting a zero-day vulnerability in Oracle's E-Business Suite.
Operations at Wits remain unaffected.
An investigation is underway to assess potential data breaches.
The university's Chief Information Officer is coordinating with Oracle and cybersecurity experts to implement patches and secure systems.
Analysts warn that zero-day exploits have severe consequences and require stronger cybersecurity in higher education.

1 of 2

Harvard Cyberattack Response

Harvard University confirmed a cyberattack exploited a zero-day in Oracle E-Business Suite linked to the Clop group (CVE-2025-61882) enabling remote access.
Clop claims it stole data from a small Harvard administrative unit.
The FBI warned organizations to patch this vulnerability immediately.
Envoy Air, a subsidiary of American Airlines, was also compromised via the same Oracle flaws.
Cybersecurity experts urge urgent patching as ransomware tactics evolve.

1 / 2