Cl0p Ransomware gang claims breach of Broadcom through Oracle E-Business Suite vulnerabilities

The Cl0p ransomware group has claimed responsibility for breaching Broadcom's internal systems as part of a massive extortion campaign exploiting a critical zero-day vulnerability in Oracle E-Business Suite. 

The attack exploited CVE-2025-61882 (CVSS score 9.8), which allows attackers to execute arbitrary code without authentication through Oracle's Business Intelligence Publisher integration within the Concurrent Processing component. 

 Broadcom was listed as one of the highest-profile victims in this exploitation campaign that has compromised organizations globally.

In response to the incident, a Broadcom spokesperson confirmed to Cybersecuritynews.com that the company uses Oracle E-Business Suite for certain internal corporate financial operations and has been targeted by cybercriminals exploiting these zero-day vulnerabilities.

The number of affected individuals or exposed data types is not disclosed. 

Broadcom stated that it has forensically examined and patched its Oracle system to remediate the vulnerabilities, and claims that operations are not affected with full confidence in the integrity of financial data. The company claims that if any of the limited types of data processed in Oracle are leaked, it does not expect the information to pose significant risk to customers, vendors, partners, or employees.