Oracle

Oracle began eliminating 20,000 to 30,000 employees on 31 March 2026, roughly 18% of its 162,000 global workforce, in the largest single AI-capital reallocation in enterprise software history. Its FY26 Form 10-K, filed with the SEC on 22 June, confirmed the toll at 21,000 roles (162,000 down to 141,000) and disclosed severance and exit costs jumping from $374 million to $1.84 billion, while Oracle Cloud Infrastructure was shielded from the cuts and grew. The cuts freed an estimated $8-10 billion annually, earmarked for AI data centre spending to address a $20 billion funding shortfall against a total committed infrastructure outlay of $156 billion. India bore the heaviest burden at roughly 12,000 staff terminated by 6am email with no prior warning, with a further 500-plus Romania-based roles cut on 25 June. WARN Act filings covered fewer than 4% of the affected workforce, with Massachusetts filing absent despite Oracle's Burlington offices; the 60-day disclosure clock expired around 30 May 2026.

Oracle is a core partner in the Stargate joint venture alongside OpenAI and SoftBank. Its Dubai data centre was struck by Iranian missiles during the March-April 2026 Iran conflict; the IRGC explicitly named Stargate UAE in a 1 April targeting video. The Stargate US programme has only 1.2 GW operational at Abilene, Texas, against a nominal 10 GW US target. By May 2026, Oracle's WARN Act navigation, phasing cuts to avoid site-level thresholds, had been replicated explicitly by PayPal and others without a single enforcement action initiated.

Founded in 1977 by Larry Ellison, Oracle is the world's second-largest software company by revenue, with dominant positions in enterprise databases, cloud infrastructure (OCI), and healthcare technology. Its restructuring is the template for legacy enterprise AI transition: cut headcount in service and support roles, redirect capital to compute infrastructure, and sell the AI productivity argument to investors.

Oracle's WebLogic Server is a long-standing enterprise middleware target. CVE-2024-21182 (CVSS 7.5), patched in Oracle's January 2024 Critical Patch Update, was added to the CISA Known Exploited Vulnerabilities catalogue on 1 June 2026 after honeypots recorded active payload delivery on ports 7001 and 7002 since mid-May — 17 months after the patch shipped. Payloads included Cobalt Strike beacons, Cryptocurrency miners and Sodinokibi ransomware. CISA set a federal remediation Deadline of 22 June 2026, the longest window in the June batch, reflecting the scheduled-downtime cost of patching Java middleware. The 17-month gap between patch and weaponisation mirrors the SolarWinds 14-month undetected dwell time: the same inventory-blindness assumption exploited at a different layer. For Oracle customers, the WebLogic case illustrates that patch issuance and verified deployment are not the same event.

Oracle is a core infrastructure partner in the Stargate joint venture. Its data centre estate is central to the AI infrastructure buildout funded by the March 2026 workforce restructuring. The Dubai facility's targeting during the Iran conflict placed AI hyperscaler infrastructure in an active conflict zone for the first time.