Computerworld notes a recent presentation (Adobe Acrobat format) from ReVuln, a security firm based in Malta, outlining vulnerabilities in several game engines. According to ReVuln, they have identified client and/or server vulnerabilities in CryENGINE 3, Unreal Engine 3, id Tech 4, and more, which can be used to launch remote code execution or denial-of-service attacks. The CW article notes that the developers of these engines, which power a significant number of games, were not informed of these issues in advance of this release, saying: "ReVuln doesn't report vulnerabilities to affected vendors. The company sells information about newly discovered vulnerabilities to third-party companies and government agencies as part of a subscription-based service." Thanks Ant.