February 24, 2021—KB4601382 (OS Builds 19041.844 and 19042.844) Preview

None None...

The Woman Bulldozing Video Games’ Toughest DRM

For Empress, cracking titles like Red Dead Redemption 2 and Immortals Fenyx Rising is more than a pastime. It's a mission...

February 16, 2021—KB4601380 (OS Build 18363.1411) Preview

None None...

Cyberpunk 2077 Publisher Hit with Hack, Ransomware

UPDATE CD Projekt Red, the videogame-development company behind Cyberpunk 2077 and the wildly popular Witcher series, has suffered a ransomware attack that could soon result in troves of company data being dumped online – including game source code. The Warsaw-based company tweeted out a notice o...

LuMaster Game Inventory in dll Hijacking Vulnerability

LuMaster Game Library is a game application library software officially launched by LuMaster. LU Master Game Library is vulnerable to dll hijacking. An attacker can exploit this vulnerability to execute malicious code...

Games Drive Christmas Web Traffic

If you turned on a new game console and/or downloaded video games over the holidays, you certainly weren't alone. New data from Akamai shows that game-related traffic delivered across our network was more than double the Q4 average on December 25, and up nearly 50% on December 26. During the same...

January 12, 2021—KB4598245 (OS Build 17134.1967) - EXPIRED

None None...

A week in security (January 4 – January 10)

Last week on Malwarebytes Labs, we released survey results about VPN usage and found that 36 percent of our respondents use it. We also talked about Adobe Flash Player reaching its end of life—meaning, Adobe wont be supporting the updating and patching of its Flash Player software; covered the...

Mail.ru: Eval-based XSS in Game JS API (mailru.core.js) via cross-origin postMessage()

mailru.core.js as used by GMR/store.my.games application was vulnerable to XSS via PostMessage handler...

ctf_repo

This is a Python script for a CTF Capture The Flag challenge called "FunPwn" from the 2016 ASIS CTF game. The script is designed to automate the game by interacting with the game's console. Here's a breakdown of the script: 1. The script starts by importing the pwn module, which is a Python libra...

Tiger Tooth Live PC Extreme Client suffers from dll hijacking vulnerability

Tiger Tooth Live PC Extreme Client is a game live streaming software. Tiger Tooth Live PC Extreme Client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to gain control of the server...

Launching a New Game Studio and Planning for Growth

So, you're starting your own game studio. This is an incredible opportunity! You and your team get to start fresh and build the game of your dreams! But, let's be honest, if you have just founded your own game studio, odds are that you're not a technical architect. You may have some technical...

Launching a New Game Studio and Planning for Growth

So, you're starting your own game studio. This is an incredible opportunity! You and your team get to start fresh and build the game of your dreams! But, let's be honest, if you have just founded your own game studio, odds are that you're not a technical architect. You may have some technical...

Steam vulnerabilities allowed remote take over of users’ computers

By Waqas In total, CheckPoint researchers found 4 vulnerabilities all allowing attackers to harm Steam and those using 3rd party game server. This is a post from HackRead.com Read the original post: Steam vulnerabilities allowed remote take over of users computers...

Valve's Steam Server Bugs Could've Let Hackers Hijack Online Games

Critical flaws in a core networking library powering Valve's online gaming functionality could have allowed malicious actors to remotely crash games and even take control over affected third-party game servers. "An attacker could remotely crash an opponent's game client to force a win or even...

Ta-da Accelerator Denial of Service Vulnerability

Ta da Accelerator is a game gas pedal software. A denial of service vulnerability exists in DaDa Accelerator version 5.6.19.816. An attacker could exploit the vulnerability through a specially crafted program to cause a computer crash...

Fighting Fish PC client suffers from dll hijacking vulnerability

Douyu PC client is a game video live streaming software. A dll hijacking vulnerability exists in Douyu PC client. An attacker can exploit this vulnerability to execute malicious code...

CVE-2020-23735

In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges...

Privilege escalation

In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges...

CVE-2020-23735

Technical details on CVE-2020-23735 are not publicly provided in the supplied documents; no concrete exploit specifics, affected versions, or fixes are present. Monitor for updates.