Oracle Cloud: security advisories, deprecations and releases

Oracle-Seeded Application Roles Now Protected

IAM identity domains block changes to Oracle-seeded application roles, preventing accidental or unsupported modifications.

ShinyHunters Mass Exploitation Campaign

Following the arrest of a suspected member, the ShinyHunters threat group escalated its activities, conducting a mass exploitation campaign against a zero-day vulnerability in Oracle PeopleSoft (CVE-2026-35273). The group successfully bypassed WAF mitigations to steal sensitive data from dozens of organizations across government, healthcare, and technology sectors, including a high-profile breach of an FBI jobs portal. The group, which may…

CVE-2026-35273

Remove Email Suppressions with the UserEmailSuppressionRemover API

New API allows admins to clear email suppression flags on user accounts, restoring Identity Domains notifications.

Self-service continuous consumption discount commitments are now available

Oracle Cloud now lets customers create continuous consumption discount commitments through the Console, CLI, or API for discounted pricing on eligible resources.

Validate GPU cluster health with Cluster Health Checks

Oracle Cloud Infrastructure adds Cluster Health Checks for GPU nodes using passive and optional active tests to spot faults before AI and HPC workloads run.

OCI Kubernetes Engine GPU maintenance event repair

OKE can now coordinate maintenance for bare metal GPU nodes when the GPU Health Monitoring add-on reports a critical HPC fault.

Select AI Support for Gemini Enterprise Agent Platform

Autonomous Database now lets Select AI profiles use Gemini Enterprise Agent Platform models for NL-to-SQL, chat, embeddings, and other Select AI actions.

Monitor Storage Cache Hit Metrics

Autonomous Database now exposes read-hit and write-hit metrics that show the percentage of I/O served from the storage cache.

Support for Kubernetes version 1.37.0 in a preview release of Kubernetes Engine

Oracle Cloud Infrastructure Kubernetes Engine now supports Kubernetes 1.37.0 in preview for early access testing in the OC1 realm only; it is not intended for production workloads.

OCI Kubernetes Engine adds GPU host repair

OKE now coordinates repair of bare metal GPU worker nodes using user-initiated or GPU health monitoring triggers.

Code-only deployment for OCI Functions is now available

OCI Functions now supports code-only deployment for Go, Java, Node.js, and Python via ZIP or uber JAR, eliminating the need to build or manage container images.

Support for Kubernetes version 1.36.4

OCI Kubernetes Engine now supports Kubernetes 1.36.4 alongside 1.35.2 and 1.34.10. Version 1.36.1 will lose support on November 3, 2026.