Oracle's bounce was relief; the NetApp deal is what dilutes its OpenAI problem

Oracle rose 4.6% by late morning Tuesday to $138.78 after Monday's 52-week low. NetApp's own 0.4% gain suggests Oracle's move was a relief bounce; the companies announced ONTAP storage would run natively inside Oracle Cloud within 12 months. The deal still matters: Oracle has more than $600bn of backlog, roughly half tied to OpenAI, and native NetApp support gives it a way to sell cloud to enterprise customers beyond OpenAI.

Oracle shares traded at $132.94 before the bell on Tuesday and $138.78 by late morning in New York, up 4.6%, and held a gain of about 5% into midday, according to Benzinga's rundown of Tuesday's move. That followed a close at a 52-week low on Monday, part of a slide that has left the stock down roughly 55% from its peak.

NetApp's announcement offered one possible catalyst. At its INSIGHT conference, running September 29 to October 1, NetApp and Oracle announced that a fully managed OCI NetApp Storage Service, which puts ONTAP natively inside Oracle's cloud, will reach general availability within 12 months. Neither company disclosed pricing. NetApp shares moved 0.4% on the news, compared with Oracle's 4.6% rise. That gap suggests Oracle's rally reflected relief after a sharp decline more than a reassessment of enterprise storage prospects.

The storage agreement could have longer-term significance than Tuesday's share move. Oracle has more than $600bn in remaining performance obligations, future revenue already under contract. Paul Meeks of Freedom Capital Markets estimates about half is tied to OpenAI, leaving Oracle exposed to one customer's ability to pay for promised compute. That exposure became more visible this week. OpenAI cancelled its GPT-6.1 Astra model on Monday because it did not clear an internal safety bar. Last Thursday Oracle invoked a force majeure clause on Project Jupiter, its New Mexico data centre, to protect itself from certain payments if the site slips past its planned 2028 launch. Oracle says the project is on schedule. Invoking the clause gives the company an option if the schedule changes.

Oracle needs more customers beyond OpenAI to reduce concentration risk. Native NetApp storage in OCI could help attract them. NetApp's installed base is widely used for enterprise file storage, including hospital records and engineering project files. These workloads can bring steady cloud spending without requiring a GPU cluster. Oracle previewed the integration on July 15 and has now set a 12-month timeline for general availability. Oracle partnerships chief Konstantinos Papamiltiadis said: "Enterprises shouldn't have to rebuild their data infrastructure to move to the cloud." Companies that already run ONTAP on premises could use the same storage inside OCI without reworking their applications, giving Oracle a route to win business outside the AI capital-spending race.

Oracle is behind Amazon, Microsoft and Google, which already offer native NetApp storage in their clouds. Tuesday's announcement closes a gap those rivals addressed years ago. Oracle can reduce concentration risk by becoming a credible general-purpose cloud provider, competing on cost, compatibility and vendor relationships. For now, it can look like a landlord renting data-centre space to one AI lab. Storage interoperability may help make Oracle more credible to a CIO who has never heard of Project Jupiter. The company needs to reduce its reliance on a single customer.

Google's Mandiant and its Threat Intelligence Group warned that ShinyHunters, tracked as UNC6240, is running a new mass-exploitation campaign against Oracle PeopleSoft customers. PeopleSoft is enterprise resource planning software that companies install and operate on their own systems, outside Oracle's cloud. More than 100 customers were targeted in June alone, including the University of Nottingham, the National Association of Insurance Commissioners and Nissan. The latest wave has spread across agriculture, government, healthcare, IT services, technology and transportation. Attackers exploit a since-patched vulnerability, CVE-2026-35273, and bypass web-application-firewall rules by writing the letter P in a URL as its encoded form, "%50," to reach an internal endpoint called PSEMHUB. They then install web shells and a backdoor called SideEye before moving to extortion.

Oracle has shipped the fix. The customers being hit run old, self-managed software and many are running unpatched versions. PeopleSoft shops keep the system because it is stable and it works, and patching stays somebody else's problem until an extortion email arrives. That makes the financial exposure for Oracle itself small. It also hands Oracle's sales team the same pitch the NetApp deal supports from another angle: move off software you run yourself and onto infrastructure Oracle patches for you. A breach that costs Oracle almost nothing in direct liability is still a headline with Oracle's name on it, and every customer that reads about SideEye backdoors on PeopleSoft systems remembers the vendor's name before they remember whose job the patching was.

Oracle's fiscal second-quarter results, due in December, should show whether this strategy is working. Investors will want to know how much RPO growth comes from customers other than OpenAI. Management is likely to emphasize non-OpenAI bookings, particularly enterprise storage and infrastructure wins. That breakdown would show whether the backlog is spreading across more customers. Until then, Tuesday's 4.6% gain looks like a recovery from oversold levels; December's results will offer a better measure of concentration risk.