A researcher with AppSec Inc. demonstrated a method for exploiting cryptographic vulnerabilities in the authentication protocol used for Oracle databases, which allows attackers to crack the passwords using a brute force attack. Oracle has released a fix but it's a new, incompatible version of the protocol. The current version is still vulnerable. Read more about it here:
Read Next
