Developers: | Oracle |
Date of the premiere of the system: | 2014/04/09 |
Last Release Date: | 2022/01/25 |
Technology: | Cloud Computing, IaaS - Infrastructure as a Service, Data Centers - Data Center Technologies |
Content |
Main article: What is IaaS
Oracle Cloud Infrastructure - Infrastructure-as-a-Service (IaaS) solution with Capacity On Demand option.
History of development
2025: Data Breach
On April 16, 2025, the United States Cyber Security and Infrastructure Protection Agency (CISA) reported the hacking of Oracle cloud systems . The attackers had millions of records in their hands, which could have "long-term" consequences.
It is known that the incident occurred in January 2025. A hacker under the pseudonym rose87168 claimed the theft of about 6 million records from Oracle servers. The incident could affect about 140 thousand Oracle customers in different regions around the world. CloudSEK cybersecurity researchers who studied the leak found encrypted passwords, Java Key Store (JKS) files, key files and other confidential information in it.
The affected corporation itself, in one of the letters to customers, said that the Oracle Cloud Infrastructure (OCI) was not hacked, but the hacker "gained access and published usernames from two outdated servers that were never part of the OCI." The investigation of the invasion is carried out by the FBI and information security specialists. The hack could have been performed through a CVE-2021-35587 vulnerability affecting the Oracle Access Manager service.
The CISA notice said the scale of the incident as of mid-April 2025 remains unconfirmed. However, the nature of the recorded hacker activity indicates potential risks for organizations and individuals, especially in cases "where credentials can be disclosed and reused in other unrelated systems."
Compromising credentials including usernames, email addresses, passwords, authentication tokens and encryption keys could pose significant risks to corporate environments, CISA warns.[1] |
2022
Oracle cloud allowed to store secret Oracle data
On February 15, 2022, Oracle announced that it could now post on its Oracle Cloud Infrastructure platform some U.S. federal government mission data related to Top Secret/Highly Classified Information (TS/SCI) and special access programs.
Department of Defense experts gave it the right to operate, or ATO, to safely process some of the U.S. Air Force's most important data in areas the company calls Oracle National Security Regions, according to the company's statement. These computing zones, located in airspace, are connected only to government networks, but not to the rest of the internet.
Department of Defense experts granted the right to operate (ATO), which will allow you to safely process some of the most sensitive data of the Air Force, the company said in a press release. |
Oracle has long provided high performance, availability and open computing for the Department of Defense and intelligence community to safely execute the most sought-after, critical secret workloads, said Glen Dodson, senior vice president of Oracle on the national security team. - Oracle's broad data management and analytics services, including embedded artificial intelligence, are an extremely valuable addition to the Defense Department's multi-cloud strategy. |
The ATO applies only to US Air Force data, but the company expects to post classified data from other departments over time, receiving accreditation in the future. Only two companies - Amazon Web Services and Microsoft - have received Level 6 accreditation from the Defense Information Systems Agency to host data at all levels of the state classification, however Oracle's latest accreditation continues to compete between several cloud giants that are constantly fighting for important and lucrative contracts from the Department of Defense and the intelligence community.
Obtaining an ATO is often the most time-consuming part of deploying a new technical system or software to the Department of Defense. This is an official statement from an authorized body that explicitly expresses the acceptance of risk for agency operations.[2]
Integrated DevOps services based on OCI cloud platform
On January 25, 2022, Oracle announced that OCI cloud platform users have access to CI (continuous integration) capabilities based on the OCI DevOps service. The updated set of tools complements the CD (continuous deployment) platform already announced in 2021 and forms the CI/CD complex in all commercial regions of OCI. Developers can now Comita of source code in the DevOps repository, create and test software, and download validated versions to the OCI repository for deployment on OCI platforms.
According to the company, regardless of whether developers create native applications for cloudy environments or migrate existing loads to OCI, the DevOps service optimizes the complexity of the deployment process. ON With the updated functionality of DevOps, developers can automate each phase of the application lifecycle, ensuring faster release of releases and reduced errors.
Thanks to the introduction of OCI DevOps services such as Code Repositories and Build Pipelines, users of the solution have received a full CI/CD platform that optimizes software delivery within OCI and optimizes development processes.
By launching the project, the user can use DevOps as a comprehensive OCI-based CI/CD platform. Mirroring existing GitHub or GitLab repositories in OCI Code Repositories optimizes the creation of software assemblies. Having accepted the next Comitas, the user can launch DevOps Build Pipelines and quickly deploy the updated version of the software on the OCI platform - computing nodes (virtual machines and Bare Metal), OKE Kubernetes clusters and at the Functions level.
If the user migrates an existing application (from the on-prem infrastructure or from another cloud) to the OCI, the updated tools also allow you to migrate development and deployment management to the OCI. The OCI DevOps service has sufficient flexibility to configure integration with already created CI/CD practices. And if the user wants to migrate the loads while maintaining the existing CI process (for example, in Jenkins), you can only transfer the deployment to the DevOps service and use additional triggers to work with the existing CI pipeline. As a result, it becomes possible to orchestrate the release cycle using the same DevOps control tools.
The OCI DevOps service is part of the Oracle Cloud Infrastructure cloud platform. This allows OCI users to opt out of managing a separate CI/CD platform and configure access policies for team members via IAM. OCI DevOps also protects the entire software process by granularly controlling access to OCI resources. Artifacts created during the operation of software assemblies will be stored in OCI Artifact repositories. Application protocols and deployment results are stored in the OCI Logging service. From it at any time you can get the necessary information for audits and control. Team members can subscribe to event notifications related to the DevOps pipeline through OCI Notifications.
The DevOps service does not require royalties in terms of the number of users. You can only pay for the processing power and occupied storage required for pipelines and repositories. The DevOps service automates the management of software assembly launch and makes it possible to work with several competitive versions of software without additional settings for supporting hosts. OCI DevOps allows you to track the entire life cycle of software development - from source code repositories, assembly and deployment pipelines, to pointers, artifacts and environments.
Build Pipelines features include the integration of software build instruction-level tests. Deployment Pipelines allow you to create progressive delivery releases and check the impact of recent changes during the development stages and in real-world environments before being released into a productive environment. It is possible to restore the previous state of any components directly from the DevOps environment if any problems are detected in real operating conditions.
2021
AI Tools for Cloud Services
On November 10, 2021, Oracle introduced Oracle Cloud Infrastructure (OCI) AI services, which allow you to implement solutions based on artificial intelligence in corporate systems even without deep expertise in the field of Data Science. The updated OCI AI tools give developers access to ready-made models built on the basis of common business-oriented practices, together with the ability to train algorithms on the organization's own data. Six services will help developers solve a wide range of complex tasks from working with a natural language and computer vision to predicting events.
According to the company, in 2021, almost all companies can use AI to optimize their business and create customer experience. However, in most cases, such initiatives face many obstacles - from a lack of expertise in Data Science and difficulties in training models on relevant data, to implementing a suitable platform and processing your own databases. As a result, companies spend valuable resources and time instead of using AI tools ready to work with already implemented business applications.
As a provider of business applications and cloud services, Oracle offers AI solutions that enable customers to deliver results across a wide range of business processes. Among them:
- OCI Language: allows you to implement text analytics practices for in-depth understanding of unstructured text in documents, customer feedback, customer service calls, social media posts. Thanks to the presence of already prepared models, OCI Language eliminates the need for machine learning experts, inviting developers to embed tools in their solutions for analyzing meanings, extracting key phrases, classifying texts, and so on.
- OCI Speech: Provides automatic speech recognition with already built-in models trained on thousands of native and foreign speakers. The module allows you to recognize speech in real time and turn audio recordings into accurate text, opening up opportunities for searching for sections, indexing content and advanced analytics of audio and video recordings.
- OCI Vision: A pre-trained computer vision system is used for image recognition and document analysis. The tool allows you to expand the capabilities of the solution for any industry or conduct training for specific cases, such as monitoring certain areas, detecting defects and processing complex documents. OCI Vision can be used to detect visual anomalies in production, extract texts from forms, count goods, and automate business processes.
- OCI Anomaly Detection: Offers a ready-made platform for creating specific anomaly detection models early on. This approach allows you to solve emerging problems faster, reducing their negative impact on operational processes. OCI Anomaly Detection has REST APIs and SDKs for multiple programming languages that allow developers to integrate anomaly detection modules into their business applications. The module runs on a patented MSET2 algorithm that is used worldwide to analyze complex processes, such as the state of nuclear reactors.
- OCI Forecasting: opens the possibility of building time forecasts based on machine learning and static algorithms without the need for Data Science expertise. OCI Forecasting helps developers create accurate predictive systems for critical business metrics, including parameters such as product demand, profits, resource needs, and so on.
- OCI Data Labeling: Helps users perform data markup to further train AI models. Users can collect data, create and view data sets, as well as label records through the user interface or using special APIs. Marked data sets can be exported and used to develop models in any Oracle AI services, including OCI Vision or, for example, OCI Data Science.
OCI AI services are the basis of the Oracle AI family of solutions, a set of ready-made products based on artificial intelligence, machine learning and Data Science. These include Oracle Digital Assistant, as well as OCI Data Science and Oracle Database Machine Learning - solutions that are used to create, manage and implement machine learning models.
As a contact center service provider, Bosch Service Solutions uses OCI AI Services Digital Assistant and speech recognition technologies to allow users to communicate with BETO, Bosch's chatbot, in natural language. Thanks to OCI AI Services, our customers can contact the company in Portuguese using understandable voice commands. narrated by Kiriya Fernandez, head of Bosch Service Solutions in Brazil |
The combination of OCI AI Services and OCI Data Science with NVIDIA RAPIDS technologies allows data professionals and developers to optimize the full range of NVIDIA GPU-based Data Science machine learning and process tasks. told Ian Buck, Senior Vice President and Heads of Accelerated Computing at NVIDIA |
OCI GoldenGate Presentation
Oracle Corporation on April 29, 2021 introduced the Oracle Cloud Infrastructure (OCI) GoldenGate service. Out of the box, the product automates many features, including configuration, load scaling, and patch installation, while maintaining high availability. An intuitive interface allows non-database administrators to manage digital transformation, making it easier to integrate local systems with the cloud, synchronize data across regions, data pipelines, and replicate databases across multiple clouds. The service is fully integrated with GoldenGate Stream Analytics for OCI and implements streaming data analytics in multiple clouds using AI and machine learning, geospatial data and time series data. OCI GoldenGate Console Web Application simplifies deployment and provides easy configuration and continuous monitoring.
In just a few clicks, GoldenGate will launch data replication and lay the foundation for real-time data integration, which will provide data replication between various local and cloud systems and SaaS services from three providers, and much more. The following is an example of real-time replication between two Oracle standalone databases located in different OCI regions.
Since the OCI GoldenGate service is based on Oracle GoldenGate, it is fully managed: network, physical storage, replication service security are preconfigured, configured and ready for use. OCI GoldenGate service components are constantly updated. As for updates for local GoldenGate installations, in OCI GG, users will receive notifications and will also be able to install a patch on the local OGG via the OCI interface. Which allows OCI GoldenGate to become a single center of GoldenGate infrastructure management.
Finally, perhaps the most important quality of OCI GoldenGate service is its affordable price. Now you can start working with OCI GoldenGate for less than $1,000 a month. This price makes OCI GoldenGate available to businesses of all sizes. Moreover, no other provider offers such real-time data factory services. OCI GoldenGate provides a powerful, affordable and easy-to-use data factory service with no additional fees or restrictions.
2020
2018
End-to-End Security Services
On October 26, 2018, the corporation Oracle announced updated technologies cloudy safety that help customers provide from data protection to kernels the periphery of the cloud. In infrastructures addition to the self-protection and self-patching capabilities of autonomous, databases Oracle Autonomous Database as well as integration machine learning intelligent automation to eliminate, threats updated cloud services allow customers to improve the security of applications deployed in the latest generation Oracle Cloud Infrastructure.
Cloud services for October 2018 include:
- Firewall for web applications to protect against attacks on web traffic
- Protection against distributed denial-of-service attacks that prevent external parties from disrupting running applications
- An integrated cloud access security broker that monitors and secures configurations
- A key management service that allows clients to control the encryption of their data.
Technologies such as clouds, artificial intelligence, and the Internet of Things enable organizations to innovate and reduce costs. However, along with the emerging capabilities, risks increase, including an increased attack zone. Security professionals rely on manual processes and disparate tools that increase the likelihood of human error and require excessive time to accurately detect and respond to threats and outages. Oracle has developed integrated layers of defense designed to protect users, applications, data, and IT infrastructure.
Organizations face persistent sophisticated security threats from multiple parties that want to attack apps and access sensitive data. Building on Oracle's security expertise, emerging solutions provide customers with business continuity capabilities that make it easier than ever to provide comprehensive, end-to-end protection. These levels of security include highly automated detection, preemption, response, and intelligent security controls that help reduce the threat of data breaches, regulate compliance, and reduce overall risk. |
To help customers combat today's complex threats and protect data, Oracle introduces the following automated security solutions:
- Web Application Firewall (WAF). Native Firewall (WAF) is designed to protect applications in the latest generation Oracle Cloud Infrastructure from botnets, application-level attacks, and DDoS attacks. This platform can automatically respond to threats by blocking them and alerting security professionals to investigate the incident further.
- Protection against DDoS attacks (Distributed Denial of Service). As part of the upgrade to the latest generation of Oracle Cloud Infrastructure, all Oracle data centers are equipped with tools to automatically detect DDoS attacks and protect against massive DDoS attacks at levels 3 and 4 (network and transport) of the OSI model. This helps ensure that Oracle network resources are available even with a sustained attack.
- Cloud Access Security Broker (CASB). Cloud security requires continuous monitoring and enforcement of access policies to ensure that no one leaves the network or data unprotected. Oracle Cloud Access Security Broker (CASB) continually reviews OCI environments to ensure compliance with corporate security policies. It comes with preconfigured policies and controls to enable customers to deploy applications faster while reducing security and operational risks. Broker CASB also applies machine learning-based behavioral analytics to predict threats.
- Key Management Service. Oracle Key Management enables enterprises to encrypt data with self-managed keys, offers centralized key management, and key lifecycle monitoring capabilities. The solution uses partitions in highly available Hardware Security Modules that are isolated to each client. It is ideal for organizations that need to monitor compliance and security management policies so that their data is encrypted where it is stored.
Enterprise Level SLA Expansion
Oracle In February 2018, the Corporation announced the expansion and supplementation of SLA the enterprise level agreements (service level agreements) in order to provide customers with additional opportunities.
The previously announced 99.995% availability guarantee for the Autonomous Database Oracle Autonomous Database allowed Oracle to present a comprehensive cloud warranty on IaaS with appropriate financial responsibility. With this comprehensive SLA, Oracle is now a cloud infrastructure provider offering guaranteed service levels for performance, manageability, and availability - three key characteristics that businesses evaluate cloud infrastructure providers, the corporation emphasized.
The updated SLAs are an integral part of Oracle's strategy to provide cloud infrastructure for enterprise workloads. SLAs now provide validation to customers who want to move workloads to the cloud and require not only consistent availability, but also sustainable performance and ongoing management of the cloud infrastructure that serves their critical applications and databases. In addition, Oracle plans to extend these SLAs to all Oracle Cloud Platform Autonomous Services, covering databases, application development, mobile software and chatbots, application and data integration, analytics, security, and IT management.
Under the terms of the SLA, Oracle Cloud Infrastructure guarantees more than 90% of claimed performance every day of the specified month. If performance falls below this level by only 44 minutes within a month, customers can claim a refund in their cloud account under Oracle Service Terms. Thus, the corporation protects customers and meets the needs of enterprises that want to transfer critical workloads to the cloud.[3]
2017: Components modernized
On October 9, 2017, Oracle announced improvements to Oracle Cloud Infrastructure. They provide high levels of performance and reliability.
The improvements affected components of Compute, Networking, Edge and Storage, according to the company. They offer IT departments, developers and analysts infrastructure services optimized for industrial enterprise applications[4].
For most customers, the high performance and reliability of enterprise applications, production workloads are a capital-intensive and resource-intensive process in their data centers, and even more complex in the public cloud. Oracle Cloud Infrastructure provides a platform for industrial enterprise applications, offering reliability enhancements that improve computing performance.
Back-office applications - enterprise resource management (ERP) systems, public external applications like e-commerce and high-performance applications like high-performance computing ( HPC) - run faster, more reliable and less expensive on Oracle Cloud Infrastructure, the company said.
Oracle technologies support enterprise-level reliability by clustering local databases using Oracle Real Application Clusters and Oracle Exadata as a managed cloud service. Combined with geographically distributed regional data centers, each with multiple independent fault-tolerant domains, Oracle provides a set of capabilities to increase application availability and reliability.
Improved performance was made possible through a 25 Gb/s network infrastructure without re-signing and optimized network access with DNS services.
The company introduced a hardware platform (X7) and a line of cloud service configurations. Bare Metal Dense I/O service has 52 computing cores and 51 TB of NVMe solid state drive (SSD) capacity; it is capable of performing millions of I/Os per second (IOPS).
Bare Metal Standard offers 52 cores, but can scale up to 512 TB SSD volumes, which allows you to use scenarios that require large capacity, storage capabilities.
Bare Metal Virtual Machine services will be available in formats with 1, 2, 4, 8, 16, 24 cores, will use fast processors and increased memory capacity of the X7 architecture.
Oracle Bare Metal GPU services provide high performance for intensive computing workloads used by researchers, analysts, developers, and animation professionals. GPUs are designed to process and analyze massive data sets with higher efficiency than general purpose processors.
Dyn's integrated DNS service is available in Oracle's cloud infrastructure.
Oracle Cloud Infrastructure offers migration packages for Oracle E-Business Suite, JD Edwards and PeopleSoft, helping customers upgrade their infrastructure in the cloud.
2014
Oracle Storage Cloud
On April 21, 2014, it became known that the new Oracle Storage Cloud service was released and included in the IaaS solutions of Oracle Cloud Infrastructure as a Service.
The service provides a secure and scalable object-oriented storage solution that enables you to store, access, and manage data in the cloud.
Storage Cloud offers a solution to reduce capital and operational costs of storing high-reliability, high-security backups and archives. The service is interoperable with API OpenStack Swift and provides access to data through the REST and APIs. Java
Cloud Infrastructure Announcement
On April 9, 2014, Oracle announced the IaaS cloud service Cloud Infrastructure.
Description
Oracle Infrastructure-as-a-Service (IaaS) with Capacity On Demand option is one of the possibilities of using optimized Oracle Engineered Systems complexes.
Oracle IaaS Helps leverage the benefits and power of Oracle Engineered Systems directly in the enterprise environment and through monthly payments with the ability to generate additional on-demand resources to increase capacity during peak times. The customer can choose between self-management of systems and the use of Oracle Managed Cloud Services for full management of the environment by experts. Oracle
Notes
- ↑ CISA Releases Guidance on Credential Risks Associated with Potential Legacy Oracle Cloud Compromise
- ↑ Oracle cloud authorized to host top secret data for DOD
- ↑ Oracle introduces advanced and augmented enterprise-grade SLAs
- ↑ Oracle Cloud Infrastructure offers high performance enterprise applications