Major Incidents or Breaches

  • A hacker claims to have breached Condé Nast and leaked an alleged WIRED database containing more than 2.3 million subscriber records. The attacker also stated intentions to release up to 40 million additional records.
  • Ubisoft’s Rainbow Six Siege experienced a breach where attackers abused internal systems to ban and unban players, manipulate in-game moderation feeds, and grant players large amounts of in-game currency.

Newly Discovered Vulnerabilities

  • A high-severity vulnerability in MongoDB, tracked as CVE-2025-14847 (“MongoBleed”, CVSS 8.7), allows unauthenticated attackers to read uninitialized heap memory. The flaw affects multiple MongoDB versions.
  • The MongoBleed vulnerability is being actively exploited in the wild, with reports indicating over 87,000 potentially vulnerable MongoDB servers are exposed to the internet. Attackers can leverage the flaw to leak sensitive database secrets.

Notable Threat Actor Activity

  • Threat actors are actively exploiting the MongoBleed (CVE-2025-14847) vulnerability to access sensitive information from unpatched MongoDB instances. The scale of exposed servers suggests widespread scanning and exploitation activity.