>I find it more likely that the blog was (maybe still is) compromised.

That would be my thought too if it were someone else, but it's Oracle so it's most likely real.