Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Cyberpunk 2077 Bug Fixed That Let Malicious Mods Take Over PCs

Cyberpunk 2077 Bug Fixed That Let Malicious Mods Take Over PCs

CD Projekt Red has released a hotfix for Cyberpunk 2077 to fix a remote code execution vulnerability that could be exploited by third-party data file modifications and save games files.

On February 2nd, 20201, CD Projekt warned that Cyberpunk 2077 users should avoid using files, such as mods that modify data files or custom save game files, due to a vulnerability in how the game uses DLL files.

Last week, CyberpunkSaveEditor creator PixelRick disclosed that a buffer overflow vulnerability chained with a non-ASLR DLL (xinput1_3.dll) allows specially crafted save games or modifications to perform code execution on a PC.

ASLR, or address space layout randomization, is a security feature that randomizes the memory regions (address space) utilized by a process. By doing this, vulnerability exploits must be tailor-made for a particular process as it is currently loaded into memory.

Also Read: Website Ownership Laws: Your Rights And What These Protect

If exploited, this vulnerability could have allowed attackers to execute commands on the computer, including download and installing malware.

To resolve the vulnerabilities, CD Projekt has released Cyberpunk 2077 Hotfix 1.12, which states it “Fixed a buffer overrun issue” and “Removed/replaced non-ASLR DLLs.”

Cyberpunk 2077 Hotfix 1.12 changelog

With this hotfix installed, the vulnerable xinput1_3.dll DLL file has been removed, and the Cyberpunk2077.exe executable now loads the ASLR-enabled C:\Windows\System32\xinput1_4.dll file bundled with Windows 10.

The ASLR feature is shown to be enabled in the xinput1_4.dll file by the ‘dynamic base’ characteristic displayed using the ‘dumpbin.exe /headers’ command, as shown below.

Dynamic base characteristic in xinput1_4.dll
Click to see a larger image

If you are currently launching Cyberpunk 2077 outside of Steam or using a mod manager, it is strongly advised to update the game first within Steam before playing it.

Also Read: Computer Misuse Act Singapore: The Truth And Its Offenses

The patch is tiny and only takes a few seconds to install.



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us