CloudFlare introduced a protection system to fight against AI crawlers.

The issue is that crawlers from Meta and OpenAI proudly ignore the no-crawl rule and scrap every single website available.

Which is not simply stealing all the data, but also causing website owners to pay for all that. Since servers usually have a limit of about 0.5-2 TB of data per month within prepaid tier. Everything else leads to additional payments — often hundreds or even thousands of dollars.

#AI@GameDEV
#Security@GameDEV

Be careful with any files you receive from potential partners: PDF, office files, and even Blend files can be infected in a certain way.

In this case a person contacted a 3D artist and provided an infected Blend file. Fortunately, he disabled Python execution and wasn't affected.

#Blender@GameDEV
#Security@GameDEV
#Python@GameDEV

A Polish researcher used ChatGPT-4o to create a fake passport, which was approved by a platform that used standard ID and selfie-based verification. This might sound like the utopia everyone was afraid of, but it’s the reality as of today, and it exposes a serious gap in the way digital onboarding is being handled.

#AI@GameDEV
#Security@GameDEV

Trust me bro!

#meme@GameDEV
#Security@GameDEV

Oh no, companies that sponsor big YouTube channels are shady... again!

https://www.youtube.com/watch?v=iX3JT6q3AxA
#Scam@GameDEV
#Security@GameDEV

A hacker broke into Arc System Works and spread the source code of Guilty Gear. The RCE (remote code execution) fear is promoted by content creators, but it's unlikely.

The game itself isn't new, but the case is still notorious.

#Security@GameDEV
#Fighting@GameDEV

No, your Steam account isn't hacked. 89 millions of accounts are just some SMS logs, possibly stolen from one of the major mobile carriers in Europe. And they are not even covering 89m users, only up to 50m.

Despite that, an awkward hacker have tried to sell this chunk of data for $5K, pretending that it will allow the buyer to get into affected accounts.

The only possible outcome from this leak is spam and phishing: do not open links in messengers, email, etc. It is generally a bad idea, not just because of the leak. And do not enter your Steam credentials anywhere.

#Steam@GameDEV
#Security@GameDEV

Let's protect your Godot Games even further:

Godot Secure transforms your Godot engine into a fortress for game assets. By integrating Camellia-256 encryption with a unique security token system.

This solution creates a cryptographically unique engine build that prevents generic decryption tools from accessing your game assets.

https://github.com/KnifeXRage/Godot-Secure/
#GodotEngine@GameDEV
#Security@GameDEV

Yeah, that stuff

#Security@GameDEV
#meme@GameDEV

Be careful with Asus: they have more holes than that funky Apple cheese grader case:

https://www.youtube.com/watch?v=Vy_KWP04pfs
#Asus@GameDEV
#Security@GameDEV
#Hardware@GameDEV

Yay, safety!

Fun fact: the issue has been discovered before, patched out, but still replicated after the patch. Now they are patching it again.

#Security@GameDEV
#Microsoft@GameDEV

“How to kill a parent with a fork” is a very different type of Google search, if you are a system administrator or a child:

https://www.youtube.com/watch?v=3NyUgv6dpJc

https://fightchatcontrol.eu

#Europe@GameDEV
#Security@GameDEV

Fake emails helped hackers to gain access to NPM packages with 2 billion weekly downloads. Yep, I never trust NPM, PIP, and so on. They are a huge hole in security.

#JavaScript@GameDEV
#Security@GameDEV

Be very careful with GitHub emails: scammers send out phishing messages to all active GitHub users!

1. No, they are not from GH
2. No, you aren't getting $$
3. Yes, believing this would be dumb, but apparently thousands did and it's been out for a few days only

https://github.com/orgs/community/discussions/174380

#Hackers@GameDEV
#Security@GameDEV
#GitHub@GameDEV

Recently, Unity have found a security issue that affects all projects made on all versions of the engine since 2017.1:

Applications that were built using affected versions of the Unity Editor are susceptible to an unsafe file loading and local file inclusion attack, depending on the operating system.

It means, that thousands of games and game assets are affected. And the majority of them WILL NOT BE FIXED, since they are abandoned or on low maintenance mode. So, playing Unity games may be a security issue now.

https://unity.com/security/sept-2025-01

#Unity@GameDEV
#Security@GameDEV

Almost everyone who contacted the Discord support team during the last couple of years, is affected:

Discord was using a 3rd party support service and they leaked almost everything they could, including photos and documents provided.

They pretend that only a few people were affected, but it seems that everyone who contacted their support got the warning.

In the meantime EU is still trying to implement Chat Control 2.0 with extra backdoors to your files and messages.

#Security@GameDEV
#Discord@GameDEV
#SocialNetworks@GameDEV

Don't trust bots, folks

#Steam@GameDEV
#Security@GameDEV