Security
Penetration Testing, Security, Video Games,
The Truth of iOS Game Hacking in 2024
A common concept that comes up regarding hacking mobile and handheld devices is that iOS is innately more secure than Android. Now, in part, there is some truth to this. iOS hacking and iOS game hacking does have several barriers of entry to it, requiring a jailbroken iOS device to even begin the attempt. It’s also a closed system and ...
30 May 2024
Cybersecurity, Security, Video Games,
Common Game Flaws Found During Penetration Testing: Cyrex Engineers at Work
Back again into the incredible work our security engineers conduct, this time right into the heart of our speciality! Game security is our bread-and-butter, it is the mainstay by which we established the gold-standard of our penetration testing services and continue to grow and develop our skills. Hazem Elsayad, Lead Offensive Security Engineer for the Cyrex Entertainment team, has ...
18 April 2024
Cybersecurity, Security, Video Games,
Regression Testing: Why It’s Crucial for Airtight Cybersecurity (In 2024)
A common misconception we see regarding digital security is that regression testing is an extraneous or unnecessary addition to your cybersecurity efforts. This could not be further from the truth! Even if you have your own internal security team, patching any discovered issues during a penetration test will almost certainly give rise to new issues or vulnerabilities. Let’s take ...
4 April 2024
Penetration Testing, Security,
NIS2 Security Directive Compliance: Everything Essential Entities Need to Know
Is your organisation prepared for the evolving cybersecurity landscape? The European Union recently introduced the NIS 2 Directive (NIS2) in 2023. This significant update to the original NIS Directive aims to strengthen the cybersecurity posture of essential entities across critical sectors. This article provides a clear overview of NIS2 and its implications for your organisation. We’ll also explore how Cyrex, ...
26 March 2024
Penetration Testing, Security,
DORA Compliance: Fortify Finance with Penetration Testing
The Digital Operational Resilience Act (DORA), a new EU regulation enforcing stricter IT risk management procedures, will go into effect in January 2025 to protect financial systems from disruptions and cyberattacks. With cyberattacks on financial institutions on the rise, the average cost of a data breach in the financial industry worldwide reached a staggering 5.9 million U.S. dollars in 2023. ...
26 March 2024
Security, Video Games,
The Growing Challenges of Online Gaming Services: Performance, Scalability & Security
Don’t be fooled by the title, we know that online gaming is nothing new. However, we’ve noticed a staggering increase in the inclusion of online functions or some degree of online connectivity, even in fully singleplayer experiences. Whether it’s for a gameplay reason or for anti-piracy reasons, such as the controversial Always-on DRM, we’re seeing a transition where gaming ...
14 March 2024
Security,
Intercepting HTTPS Traffic in Desktop Apps & Games: Cyrex Engineers at Work
We’re back checking in with our engineering team, discussing some of the work they do in their spare time to hone their skills and help make the digital world a safer place. Visiting us again is Hazem Elsayad, Lead Offensive Security Engineer for the Cyrex team. He’s got some more fantastic case studies and write-ups of his work including his ...
14 February 2024
Bug Bounty, Penetration Testing, Security,
Bug Bounty Write-Up: Cyrex Engineers at Work
We often say that at Cyrex, our team live and breath cybersecurity and it’s no exaggeration! Our security engineers often seek out bug bounties and other challenges to support their ongoing careers and cybersecurity efforts. In this ongoing series, we’ll dive into some of the write-ups from our security engineers and show you a little of the talent that makes ...
11 January 2024
Blockchain, Security,
Uncovering Vulnerabilities: Decoding the Off-chain Code of Blockchain Bridges
My name is Kyryl Volkov and I’m one of Cyrex’ resident security engineers. In this blog post, I’ll take you through and discuss 2 critical vulnerabilities in the bridge backend I discovered during one of our security assessments in Cyrex. These vulnerabilities allow malicious actors to steal all funds from the bridge. It was a typical [burn & mint] bridge, ...
27 November 2023