Microsoft and Steam Take Action as Unity Vulnerability Puts Games at Risk

AI-suggested

European organizations should immediately identify all Unity-built applications in their environment, including games and enterprise software, and verify their Unity Editor versions and runtime DLLs. Developers must update to the latest patched Unity Editor versions and rebuild applications to incorporate fixes. For applications no longer under active development, Unity’s patched UnityPlayer.dll runtime files should be deployed to replace vulnerable libraries without full rebuilds. Organizations should coordinate with software vendors and game developers to ensure timely updates are applied. Microsoft Defender users should ensure their endpoint protection is up to date to benefit from added detection rules. Steam users should update their Steam clients and encourage developers to submit patched game versions via Steamworks. Additionally, organizations should audit and restrict the use of custom URI handlers associated with Unity applications on Windows systems to reduce attack surface. Network-level controls should monitor and block suspicious command-line parameters or unusual library loading behaviors. Security teams should educate users about the risks of installing untrusted applications that could exploit this vulnerability. Finally, continuous monitoring for unusual process launches or library loads related to Unity applications is recommended to detect potential exploitation attempts.