News for hackers. Stuff that matters.
Re:Rainbow Six Siege Hacked as Players Get Billions of Credi... by MattDaEskimo on Sunday December 28, 2025 @03:12PM (#46414059)
My heart goes out to the devs forced to return to work to solve these issues. Numerous groups claiming numerous exploits - mostly MongoBleed.

One has to wonder: why didn't anyone anticipate this happening? Surely the moment this exploit was discovered the team would've locked it down immediately?

Re:Rainbow Six Siege Hacked as Players Get Billions of Credi... by computerfan494 on Sunday December 28, 2025 @06:02PM (#46415412)
If this is a result of that vulnerability, Ubisoft only have themselves to blame. Our support contacts ensured that we knew about the vulnerability as early as possible and gave us a clear guide to remediation for our self-hosted clusters. Our Atlas clusters were automatically patched before this was announced publicly. You'd have to be running your database open to the internet (already a mistake), ignore the advice to simply turn off zlib, and ignore the fixed versions that have been available for over a week.

If you're going to be in the business of running your own critical infrastructure, you better have spent a lot of effort planning for these situations, because they are inevitable. Otherwise, it's easier to just pay a vendor to do it for you.