BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
/in General NewsA recently disclosed security vulnerability in MongoDB has come under active exploitation in the wild, with over 87,000 potentially susceptible instances identified across the world.
The vulnerability in question is CVE-2025-14847 (CVSS score: 8.7), which allows an unauthenticated attacker to remotely leak sensitive data from the MongoDB server memory. It has been codenamed MongoBleed.
“A flaw
The Hacker News – Read More
Sauron, the high-end home security startup for “super premium” customers, plucks a new CEO out of Sonos
/in General NewsSauron is appearing on the scene as concerns rise about crime among the most wealthy.
Security News | TechCrunch – Read More
I’ve tried nearly every browser out there and these are my top 4 (spoiler: none are Chrome)
/in General NewsLooking for a new browser? After testing nearly all of them, these are my top picks.
Latest news – Read More
When Risk Is Fragmented, Strategy Suffers
/in General NewsRisk fragmentation remains one of the most overlooked barriers to effective business performance. It doesn’t show up all…
Hackread – Cybersecurity News, Data Breaches, AI, and More – Read More
Meet the team that investigates when journalists and activists get hacked with government spyware
/in General NewsFor years, Access Now’s Digital Security Helpline has been aiding journalists and dissidents who have been targeted with government spyware. This is how they operate.
Security News | TechCrunch – Read More
Hacker Leaks 2.3M Wired.com Records, Claims 40M-User Condé Nast Breach
/in General NewsA hacker using the alias “Lovely” has leaked what they claim is the personal data of over 2.3…
Hackread – Cybersecurity News, Data Breaches, AI, and More – Read More
The US Must Stop Underestimating Drone Warfare
/in General NewsThe future of conflict is cheap, rapidly manufactured, and tough to defend against.
Security Latest – Read More
New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory
/in General NewsA high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory.
The vulnerability, tracked as CVE-2025-14847 (CVSS score: 8.7), has been described as a case of improper handling of length parameter inconsistency, which arises when a program fails to appropriately tackle scenarios where a length field is inconsistent with the
The Hacker News – Read More
Everest Ransomware Group Claims Theft of Over 1TB of Chrysler Data
/in General NewsOn December 25, while much of the world was observing Christmas, the Everest ransomware group published a new…
Hackread – Cybersecurity News, Data Breaches, AI, and More – Read More
Pro-Russian hackers claim attack on French postal service operator
/in General NewsFrance’s national postal service La Poste said on Friday that operations had been restored following a distributed denial-of-service (DDoS) attack that began earlier in the week.
The Record from Recorded Future News – Read More