Security News CISA orders feds to patch MongoBleed flaw exploited in attacks BleepingComputer Daniel Bender 30 Dec 2025 CISA ordered U.S. federal agencies to patch an actively exploited MongoDB vulnerability (MongoBleed) that can be exploited to steal credentials, API keys, and other sensitive data.