DestinyML Reverse Engineering Report – Inside a Modern Commercial Game Cheat
Armada researchers reverse engineered a commercial AI-powered game cheat to uncover how it uses computer vision, hardware-like input, and external infrastructure to avoid traditional anti-cheat detection. Download the report for the full technical findings, defensive implications, and detection recommendations.
Watch the latest episode of The Operator View with Nick Swink
This series bypasses high-level theory to deliver ground truth from the front lines of enterprise security. Hosted by our team of active red teamers, penetration testers, and security engineers, we break down exactly how modern threat actors are compromising SaaS environments, cloud infrastructure, and identity perimeters today.
Insights
Red Teaming Elevates Embecta's Security Within Their Complex IT Environment
MapLarge Finds the Unknowns with Armada’s Attack Surface Management
See What Attackers See: A Practical Guide to Enterprise Attack Surface Management
Video
-
Attack Surface Management (ASM) Part 2: Why Continuous ASM Beats Traditional Penetration Testing
In Part 2 of our Attack Surface Management (ASM) Field Guide Series, Cory Wolff breaks down the real differences between penetration testing and ASM and why point-in-time assessments alone can’t keep up with today’s threat landscape.
-
Attack Surface Management (ASM) Part 1: Getting Started With Enterprise ASM
Every organization has an external attack surface but few have full visibility into it. In Part 1 of our Attack Surface Management (ASM) series, the risk3sixty Armada team breaks down what it takes to stand up an enterprise-grade ASM program that continuously identifies and mitigates exposure across your digital footprint.
-
An In-Depth Look at Attack Surface Management (ASM) with risk3sixty’s Armada Team
Your attack surface is bigger and changing faster than you think. Annual security testing doesn’t cut it anymore. In this video, risk3sixty’s President, Christian White and Director of Proactive Services, Cory Wolff break down modern Attack Surface Management (ASM): What it is, how it works, and why leading organizations are adopting continuous security.
Blog
-
What “AI Aimbot” Actually Means: Inside a Modern Commercial Game Cheat (Part 2)
Welcome back to the blog. If you’re just joining us, I’d highly recommend starting with Part 1 of this series, where we go into why we reverse engineered a video game cheat, and our methodology behind it. In this post, we’ll be detailing our findings on the cheat itself, and provide some defensive takeaways for professionals to help secure their ecosystem. As a reminder, due to my own past experiences, work, and personal preferences, I’ve chosen a cheat for Bungie’s Destiny 2 as my working…
-
Reverse Engineering a Commercial AI Cheat: How AI Agents Changed the Way We Work (Part 1)
This story is just scratching the surface. Want to read the full report with extensive and detailed technical notes? Download it here. Introduction Welcome to a security company’s first blog post about video game cheats. That’s probably a surprising point for us to write about but let me lay out some facts that’ll make this…
-
Someone Else’s Cybercrime, Routed Through Your House
The modern attack surface is not confined to corporate infrastructure. Sometimes it looks like a cheap streaming box, a passive-income bandwidth app, or a neglected home device sitting quietly on a residential network. That is the backdrop for a new report from the Digital Citizens Alliance, supported by risk3sixty’s Armada team, that looks at residential…
-
Armada Team Achieves CREST Accreditation for Penetration Testing
We are proud to announce that risk3sixty and its elite Armada team has officially achieved CREST Accreditation for Penetration Testing, one of the most respected, rigorous, and globally recognized credentials in the security industry. This accreditation places Armada among an elite group of vetted, world-class penetration testing providers who have demonstrated the highest standards of technical ability, operational maturity, and commitment…
-
Hardware Hacking: Discovering a DoS in NetGear Router
Introduction While testing internet-connected devices for vulnerabilities, our team discovered a Denial of Service (DoS) condition in a Netgear router’s web management interface that can be triggered by unauthenticated network users and disrupt service for devices downstream. Timeline Identifying Services and Enumeration We began by performing enumeration on the device which included port scanning. Like…
-
Exploiting SharePoint Permissions the Co-Pilot Way
Copilot makes identifying mis-configurations in SharePoint much faster and easier to see. It honors existing permissions via Microsoft Graph: if a user can access content, Copilot can summarize. That means any accidental read access becomes dramatically easier to discover. The issue is three fold: Broken inheritance at the library, folder, and file level SharePoint allows…