Envoy Air’s Cybersecurity Breach

On October 17, 2025, Envoy Air, a Texas-based regional airline and a subsidiary of American Airlines, made headlines with the confirmation of a cybersecurity breach. This incident links back to zero-day vulnerabilities in Oracle’s E-Business Suite (EBS). Notably, the Clop ransomware group is believed to be behind this attack.

This revelation comes shortly after Harvard University’s disclosure of a similar breach on October 13. The vulnerabilities gained attention when SC Media highlighted that Oracle had informed EBS users of extortion emails earlier this month. The cyber community is noticing a pattern as these incidents become public.

MacKenzie Brown from Blackpoint Cyber emphasized the ongoing threat these vulnerabilities pose, suggesting that the focus for cybersecurity leaders now includes the adaptable tactics that groups like Clop and FIN11 are using in these attacks.

Risk Management for Third-Party Integrations

According to Mayuresh Dani of Qualys Threat Research Unit, Oracle EBS is essential for numerous sectors worldwide. The vulnerability was susceptible to exploitation for nearly three months before a patch was provided, illustrating the broader danger of third-party risks.

Dani advises that businesses need to ensure they’re up-to-date with security patches, specifically:

• October 2023 Critical Patch Update
• The security updates from October 4 and October 12, 2025, addressing CVEs with high severity scores
• The July 2025 Critical Patch Update to fortify against Clop’s attacks

With public exploits emerging shortly before Oracle’s emergency fixes, organizations must remain vigilant about potential data exposures and continue piecing together the impact of these breaches.

Qsentinel

Looking to strengthen your defense against ransomware? Explore our comprehensive guide for actionable strategies today!

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.