Google Project Zero researcher Tavis Ormandy says Blizzard games had a security vulnerability that could have remotely exploited to run malicious code on gamers PCs. The vulnerability was in the Blizzard Update Agent, which all Blizzard games use for installing game upgrades and patches. Blizzard went silent on Dec. 22, 2017, and silently rolled out a patch that Ormanda thinks is flawed. Blizzard has since said it takes security seriously, but it would not have stopped communicating with the researcher and rolled out the patch.”]

