Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack
Summary
Estée Lauder has disclosed a data breach resulting from a zero-day hack targeting its Oracle EBS instance. The attackers successfully exfiltrated personal, financial, and health information from the company's systems in August 2025.
IFF Assessment
FOE
The article details a successful cyberattack that resulted in the exfiltration of sensitive data, indicating a win for attackers.
Defender Context
This incident highlights the ongoing threat of zero-day exploits targeting widely used enterprise software like Oracle EBS. Defenders need to maintain robust patching strategies and implement proactive threat hunting to detect and respond to such advanced attacks, especially those impacting sensitive data.