The CL0P group exploited a zero-day vulnerability (CVE-2025-61882) in Oracle's E-Business Suite to steal sensitive data from global organizations, launching an extortion campaign via spear-phishing emails demanding ransoms. Oracle patched the flaw in July 2025, but prior exploitation highlighted risks in legacy systems. Enterprises must prioritize rapid patching and proactive security measures.