MongoDB attacks often exploit misconfigurations, particularly when authentication and network controls are not properly enforced.