The Indie Stone acted quickly to address the threat, which specifically targeted players on the Build 42 branches. While the Knox Event is usually about surviving the undead in Kentucky, this time the threat was digital. Reports confirmed that 14 specific mods were compromised with code capable of bypassing standard sandbox restrictions. The developer has since banned the responsible user and scrubbed the affected content from the Steam Workshop.
While Build 42 was the primary target for this specific zero-day, the team hasn't left legacy players behind. A separate security update has been pushed to Build 41 to shore up other vulnerabilities, ensuring that whether you're playing the current stable build or testing the latest features, your system remains protected. This highlights a rare but serious risk in modded gaming: even in a sandbox as deep as Project Zomboid, external code can be a double-edged sword.
If you have recently downloaded mods from the Workshop, especially those mimicking popular franchises like Silent Hill or Metal Gear, double-check your subscriptions. The developers strongly advise that users who interacted with the compromised mods take extra system security precautions, as simply uninstalling the mods may not be enough to undo potential file changes made during the exploit's window. Stay safe out there in the Exclusion Zone—both in-game and on your desktop.
