Server operators, please be advised. There is an exploit in the wild compromising SourceBans++ web installs affecting the last pre-PHP 8.1 version 1.6.4 and the new PHP 8.1 branch up until the version 1.7.0 released with the security patch yesterday.

The attacker is able to compromise the installation by spoofing a successful OpenID login with a different admin account. Depending on the account compromised, this privilege escalation may allow for rcon access via the rcon console, therefore you should assume your rcon password has been compromised. Users may also be added/edited/removed if the compromised account has web panel admin access. Existing user email addresses may also be viewed.

Please note PHP 8.1 must be installed on your web server to run the SourceBans version 1.7.0 that includes the security patch. This also requires updating Composer dependencies, one of which requires PHP to have the Sodium extension.

Update to the latest release here: https://github.com/sbpp/sourcebans-pp/releases/tag/1.7.0

A recently discovered exploit on Google Pixel phones' default screenshot editor allows unprocessed images (e.g. images uploaded onto Discord from 5 years ago until January 17) that were edited (e.g. crop or marker) to be partially reversed to recover contents from the original image. This may have security implications for users who may have inadvertently shared sensitive information assuming the edits were sufficient.

For more information, see:

https://www.theverge.com/2023/3/19/23647120/google-pixel-acropalypse-exploit-cropped-screenshots

https://twitter.com/ItsSimonTime/status/1636857478263750656

Our servers are currently crashing repeatedly on startup after the recent TF2 update and requires some fixes to be pushed by the SourceMod team.

This may take a while though, so hang tight.

Valve has fixed the latest TF2 update push stalling for community servers, and our servers have finally received it and restarted.

Thanks for your patience!

Our servers are currently down due to a crash loop while the SourceMod team catches up with changes made in the TF2 update.

Thanks for your patience!