Major Incidents or Breaches

  • Ubisoft’s Rainbow Six Siege experienced a significant breach in which attackers exploited internal systems to ban and unban players, manipulate in-game moderation feeds, and grant players billions of in-game credits. The incident exposed weaknesses in the game’s backend infrastructure and moderation controls.

Newly Discovered Vulnerabilities

  • A high-severity vulnerability in MongoDB (CVE-2025-14847, CVSS 8.7) was disclosed, allowing unauthenticated attackers to read uninitialized heap memory. This flaw could potentially expose sensitive data processed by the database.

Notable Threat Actor Activity

  • Attackers targeting Rainbow Six Siege demonstrated the capability to access and manipulate internal moderation tools, indicating a high level of access and understanding of Ubisoft’s internal systems. The breach resulted in large-scale abuse of in-game economies and moderation functionality.