Latest News
MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability
Attackers could exploit the SQL Injection flaw to compromise the game’s database and steal user data.
The CyberNews.com Investigation team discovered a critical vulnerability in Street Mobster, a browser-based massively multiplayer online game created by Bulgarian development company BigMage Studios.
Street Mobster is a free to play, browser-based online game in the mafia empire genre where players manage a fictional criminal enterprise. The game boasts a 1.9+ million player base and stores a user record database that can be accessed by threat actors by committing an SQL Injection (SQLi) attack on the game’s website.
Other games created by BigMage Studios are also potentially vulnerable to the same type of attack, which means that there is a possibility that even more users might be at risk.
The records that can be compromised by exploiting the SQLi vulnerability in Street Mobster potentially include the players’ usernames, email addresses, and passwords, as well as other game-related data that is stored on the database.
Fortunately, after we reported the vulnerability to BigMage Studios, CERT Bulgaria, and the Bulgarian data protection authority, the issue has been fixed by the developers and the user database is no longer accessible to potential attackers.
What is SQL Injection?
First found back in 1998, SQLi is deemed by the Open Web Application Security Project (OWASP) as the number one web application security risk.
Even though this vulnerability is relatively easy to fix, researchers found that 8% of websites and web applications are still vulnerable to SQLi attacks in 2020. Which, from a security perspective, is inexcusable. So much so, in fact, that UK internet service provider TalkTalk was hit with a record £400,000 fine over succumbing to a cyberattack that involved SQLi.
The vulnerability works by injecting an unexpected payload (a piece of code) into the input box on the website or in its URL address. Instead of reading the text as part of the URL, the website’s server reads the attacker’s payload as code and then proceeds to execute the attacker’s command or output data that would otherwise be inaccessible to unauthorized parties. Attackers can exploit SQLi even further by uploading pieces of code or even malware to the vulnerable server.
The fact that Street Mobster is susceptible to SQLi attacks clearly shows the disappointing and dangerous neglect of basic security practices on the part of the developers at BigMage Studios.
How we found this vulnerability
Our security team identified an SQL Injection vulnerability on the Street Mobster website and were able to confirm the vulnerability by performing a simple command injection test on the website URL. The CyberNews team did not extract any data from the vulnerable Street Mobster database.
What’s the impact of the vulnerability?
The data in the vulnerable Street Mobster database can be used in a variety of ways against the players whose information was exposed:
By injecting malicious payloads on Street Mobster’s server, attackers can potentially gain access to said server, where they can install malware on the game’s website and cause harm to the visitors – from using the players’ devices to mine cryptocurrency to redirecting them to other malicious websites, installing malware, and more.
The 1.9 million user credentials stored on the database can net the attackers user email addresses and passwords, which they can potentially use for credential stuffing attacks to hack the players’ accounts on other gaming platforms like Steam or other online services.
Because Street Mobster is a free-to-play game that incorporates microtransactions, bad actors could also make a lot of money from selling hacked player accounts on gray market websites.
What to do if you’ve been affected?
If you have a Street Mobster account, make sure to change your password immediately and make it as complex as possible. If you’ve been using your Street Mobster password on any other websites or services, change that password as well. This will prevent potential attackers from accessing your accounts on these websites in case they try to reuse your password for credential stuffing attacks.
However, it’s ultimately up to BigMage Studios to completely secure your Street Mobster account against attacks like SQLi.
Disclosure and lack of communication from BigMage Studios
Following our vulnerability disclosure guidelines, we notified the BigMage Studios about the leak on August 31, 2020. However, we received no reply. Our follow-up emails were left unanswered as well.
We then reached out to CERT Bulgaria on September 11 in order to help secure the website. CERT contacted the BigMage Studios and informed the company about the misconfiguration.
Throughout the disclosure process, BigMage Studios stayed radio silent and refused to get in touch with CyberNews.com. Due to this reason, we also notified the Bulgarian data protection agency about the incident on October 9 in the hopes that the agency would be able to pressure the company into fixing the issue.
Eventually, however, BigMage Studios appear to have fixed the SLQi vulnerability on streetmobster.com, without informing either CyberNews.com or CERT Bulgaria about that fact.
Powered by WPeMatico
Integration adds Pix, account validation, fraud controls and compliance tools for operators targeting Brazil’s regulated betting market.
Pay4Fun has integrated its financial infrastructure with Betconstruct AI’s platform in Brazil, giving operators connected to the ecosystem access to payments and compliance tooling built for the country’s regulated betting market.
Pay4Fun said Betconstruct AI clients will be able to use Pix payment processing, account ownership validation, transaction monitoring, fraud prevention, and compliance tools aligned with Brazil’s regulatory requirements.
According to Leonardo Baptista, CEO and Co-Founder of Pay4Fun, regulation is pushing operators to look beyond basic processing. “The Brazilian market has entered a new phase of maturity. Today, operators require solutions that go far beyond payment processing. They need partners capable of delivering security, compliance, and operational efficiency in an increasingly demanding regulatory environment. By integrating our solutions with Betconstruct AI, we are expanding access to a financial infrastructure specifically designed to meet the needs of the Brazilian market.”
Betconstruct AI said the integration strengthens its Brazil-facing offer for clients operating in the country or planning entry. “Pay4Fun was selected based on the expertise and industry knowledge the company has built within the Brazilian betting market. As the industry continues to evolve, the importance of working with specialized partners capable of delivering security, operational efficiency, and regulatory compliance continues to grow,” said Beatriz Lopes, the Brazil Regional Director.
Pay4Fun said it was the first payment institution serving the betting industry to receive authorization from the Central Bank of Brazil, and that the company’s infrastructure combines monitoring, identity verification, fraud and anti-money laundering controls, and compliance processes tailored to regulated iGaming operations.
The post Pay4Fun integrates payments into Betconstruct AI ecosystem for Brazil appeared first on EE Gaming | Global iGaming & Tech Intelligence Hub.
Eighth Harmony edition runs July 8–9 and spotlights ADI Predictstreet collaboration ahead of the FIFA World Cup Final.
BetConstruct AI held its Harmony Predictstreet event on July 8–9, 2026 in Yerevan, Armenia, bringing together more than 300 guests for two days of networking and company updates.
The eighth edition introduced the “Predictstreet” branding to reflect BetConstruct AI’s strategic collaboration with ADI Predictstreet, described in the release as “FIFA’s Official Prediction Market Partner.” BetConstruct AI said the partnership includes integrating ADI Predictstreet’s prediction market solutions and official match streaming rights into its platform, timed for “the most important commercial moment in the four-year sports calendar, with the FIFA World Cup Final just days away.”
Day 1 was hosted at Garni Temple for an evening reception, including a live performance by the Armenian National Philharmonic Orchestra, a mapping show and music from DJ Leblanc.
Day 2 began at SoftConstruct headquarters with an office tour and networking session, before moving to Dvin Music Hall for the Harmony Predictstreet Gala Dinner. BetConstruct AI said founders and executive leadership presented updates on Eventbook, the ADI Predictstreet partnership, Betting Mate, The Last Battle Universe, Betbuilder & Powerbank, Softgates, and “the latest updates driving Vivaro.me and Open Stake forward.”
The company positioned the event as a forum for discussing future direction across its ecosystem, and confirmed plans to continue the series with a ninth edition.
The post BetConstruct AI hosts Harmony Predictstreet event in Yerevan appeared first on EE Gaming | Global iGaming & Tech Intelligence Hub.
ESPN Networks
THE 57th ANNUAL WORLD SERIES OF POKER® CONCLUDES AN EXTRAORDINARY SUMMER OF GLOBAL ENGAGEMENT AND ELITE COMPETITION
This summer’s event also saw huge growth in reach and engagement across WSOP’s social media channels, with over 378 million views
With 51 days of thrilling, high-stakes competition in the bag, the 57th annual World Series of Poker (WSOP®) at Paris Las Vegas and Horseshoe Las Vegas officially concluded its summer tournament schedule on July 15, 2026. Featuring a massive slate of 100 live gold bracelet events, this year’s festival once again demonstrated the unparalleled scale, passion, and global community of live tournament poker.
“The 57th annual World Series of Poker proved that Las Vegas remains the undisputed epicenter of the poker universe,” said Ty Stewart, Chief Executive Officer of the WSOP. “The energy inside Horseshoe and Paris Las Vegas was nothing short of electric. What is truly remarkable this year is how our community expanded far beyond the physical walls of the casino floor. Through our newly redesigned final table arena, extensive linear broadcast schedule, and unprecedented digital engagement, we brought the drama, excitement, and glory of winning a WSOP gold bracelet to millions of new fans worldwide. We are incredibly proud of this summer’s success and cannot wait to witness the Final Nine battle for the World Championship on ESPN next month.”
Redefining the Live Experience on Poker’s Biggest Stage
Throughout the summer, the Las Vegas Strip was the focal point of the poker world as players from around the globe competed for poker’s ultimate prize: a WSOP gold bracelet and a place in poker history.
Key milestones from the summer tournament action include:
- Colossal Main Event Field: The legendary $10,000 No-Limit Hold’em World Championship (the ‘Main Event’) attracted a massive field of 9,208 entrants, creating a colossal prize pool and proving the enduring allure of the world’s premier freezeout tournament
- The New Final Table Arena: WSOP officially unveiled a completely redesigned, state-of-the-art Final Table Arena and broadcast environment. The new stage integrates advanced lighting and large-scale digital displays to elevate the presentation of poker’s most prestigious final tables
- Historic Broadcast Expansion: Live coverage of the Main Event returned to ESPN alongside a new multi-year broadcast agreement with Warner Bros. Discovery to distribute coverage across HBO Max, Eurosport, and TNT Sports globally
- The “Final Nine”: The final nine players survived a grueling field to punch their ticket to the historic Main Event Final Table. They will return to Las Vegas from August 3 to 5, 2026, to play down to a champion live on ESPN
- Summer of Superstars: This year’s event saw an unprecedented number of bracelets won by poker luminaries with impressive records in the game’s history books; Daniel Negreanu won his eight WSOP bracelet by taking down Event #76 $100,000 High Roller Pot-Limit Omaha for over $2.2M, while reigning WSOP Main Event champion Michael ‘The Grinder’ Mizrachi further burnished his reputation by winning Event #70 $10,000 Pot-Limit Omaha Championship, claiming his ninth WSOP bracelet and a $1.35M prize. The poker world’s undisputed power couple Kristen and Alex Foxen also made history by each claiming a WSOP bracelet in 2026, taking down Event #19 $25,000 High Roller No-Limit Hold’em and Event #44 $10,000 Super Turbo Bounty No-Limit Hold’em, respectively
- Seamless Player Experience: The WSOP Live mobile app continued to enhance the playing experience, streamlining registration, virtually eliminating cage lines, and providing real-time seat alerts to thousands of players throughout the summer
WSOP 2026 By The Numbers
- 251,899 entries – a new record for the total number of entries in a single WSOP series
- $469,975,059 – total 2026 WSOP gold events prize amount
- 35,157 places paid
- 22,811 entries to Event #63 $1,000 Mystery Millions No-Limit Hold’em – the biggest field in the 2026 series, the largest Mystery Millions event, and the largest $1,000 event in live tournament poker history
- 1,368 entries to Event #68 $1,000 Ladies No-Limit Hold’em Championship – the largest Ladies event in live tournament poker history
- 11,933 entries to Event #18 $1,500 Monster Stack No-Limit Hold’em – the largest Monster Stack event in live tournament poker history
- 4,764 entries to Event #87 $1,000 Mystery Bounty Pot-Limit Omaha – the largest Pot-Limit Omaha event in live tournament poker history
- 12,560 entries to Event #72 $1,000 Mini Main Event – the largest Mini Main event in live tournament poker history
- 41 – The number of $1M+ prizes won across the 2026 series
- 57 events exceeded $2+ million prize pools – equalling last year’s record
- 8 events exceeded $10+ million prize pools
- 149 – number of countries represented in the WSOP 2026 playing field
- Top Ten Countries by WSOP 2026 participants: 1 – United States, 2 – Canada, 3 – France, 4 – Great Britain, 5 – Japan, 6 – China, 7 – Israel, 8 – Germany, 9 – Brazil, 10 – Mexico
- 111 – number of countries represented in the WSOP Main Event 2026 playing field, a new record
- Oldest Player – Merle Vangieson, born June 28, 1931
- Youngest Player – Easton Jorgensen, born July 13, 2005
Worldwide Broadcasts Drive Growth Of Game
With thrilling WSOP action broadcast exclusively on ESPN Networks, Eurosport, TNT Sports, Abema Japan, Groupe M6 in France, and other media partners, poker fans had more opportunities than ever to follow their heroes, new and old, at the felt in 2026.
Comprehensive linear and digital coverage, available in more than 300 million homes across 70+ countries, ensured that countless big moments – from calculated bluffs to cunning value bets – were analyzed and enjoyed by enthusiasts on every continent.
Edited WSOP broadcasts will air from July 21, allowing a worldwide audience to catch up on all the summer’s action.
Explosive Digital Reach: WSOP’s Social Media Footprint
A highlight of the 57th annual WSOP was its unprecedented digital growth. While fans packed the physical tournament rooms, millions more watched the action unfold online. Across all major platforms, WSOP social media channels generated an astronomical 378.3 million total views during the 100-bracelet series, adding 222,828 total new followers across its digital ecosystem.
WSOP 2026 Social Media Performance
|
Platform |
Total Views/Impressions |
New Audience Growth |
|
YouTube |
38.7 million views |
103,128 new subscribers |
|
|
125 million views |
54,450 new followers |
|
|
127 million views |
56,800 new followers |
|
X |
36.6 million impressions |
8,450 new followers |
Looking Ahead: A True Global Season
While the Main Event action in Las Vegas has paused until the Final Table resumes in August, the WSOP excitement continues year-round. This year marks the formal rollout of the ambitious, revamped $1 Million Global Player of the Year (POY) race. The new global leaderboard unifies the brand’s three flagship festival pillars: WSOP Europe (which completed its historic run in Prague earlier this spring), the Las Vegas summer series, and the upcoming WSOP Paradise winter festival.
The global POY winner will be crowned at the conclusion of WSOP Paradise, hosted at Baha Mar resort in The Bahamas from December 1 to 17, 2026. In the meantime, the WSOP Circuit (WSOP-C) continues its action-packed year, including a special concurrent Circuit run in Las Vegas from July 14 to 25, 2026.
Players should follow @WSOP on X (formerly Twitter) and Instagram or check WSOP.com for more news and updates on WSOP events.
The post THE 57th ANNUAL WORLD SERIES OF POKER® CONCLUDES AN EXTRAORDINARY SUMMER OF GLOBAL ENGAGEMENT AND ELITE COMPETITION appeared first on Americas iGaming & Sports Betting News.
-
Canada5 days agoDraftKings Set to Launch its Online Sportsbook and Casino in Alberta
-
Canada5 days ago
Altenar Joins Alberta’s New Regulated iGaming Market
-
Latest News4 days ago
EveryMatrix’s Fantasma Games launches three-reel slot Bonus Bullets
-
Latest News4 days ago
Blokotech adds Wicked Games slots in new content deal
-
Latest News3 days ago
SCCG Management Launches Dedicated SCCG Brazil Division with Local Partner Thomas Carvalhaes
-
Latest News3 days ago
AGS details OIGA 2026 lineup, including Spectra SL75+ and Revel updates
-
Latest News2 days ago
Booming Games launches Tasty Bonanza Max Scatter slot
-
Latest News5 days ago
Imagine Live Goes Live with MaxBet Bringing Live Casino to the Balkans
