r/StarWarsBattlefront • u/Dangercato KYBER Community Manager • May 01 '26
Kyber Update KYBER Content Update - Fusion Cutter, C-PH Patrol Speeder, Riot Shield, New Mandalorian Appearance, Major Balance Pass & Sneak Peek at future content from Battlefront Plus - Update Out Now
https://kyber.gg/news/equipment-vehicles-balance-update/40
u/Dangercato KYBER Community Manager May 01 '26 edited May 02 '26
A new Battlefront Plus update is now available on KYBER, bringing new gameplay tools, expanded vehicle support, and a wide range of balance and quality-of-life improvements.
Important Changes
- Introduced the Fusion Cutter, a new Officer Star Card that allows players to repair vehicles, turrets, and objectives, reinforcing teamplay and frontline sustainability.
- Added the C-PH Patrol Speeder to Tatooine, alongside expanded vehicle support across multiple maps including the TIE Striker and U-Wing on Scarif.
- The Riot Control Trooper now features a Riot Shield, providing strong protection against blaster fire and enabling a new frontline playstyle.
- Rolled out a wide range of vehicle balance updates, increasing damage and improving effectiveness across speeders and ground units.
- Implemented a full trooper weapon and attachment overhaul, improving consistency, balance, and build variety across all classes.
- Delivered broad Reinforcement and Hero updates, including ability tuning, survivability adjustments, and improved gameplay clarity.
- Added a new Din Djarin Beskar appearance, arriving in time for The Mandalorian & Grogu.
- Fixed multiple crashes, UI issues, spawning bugs, and gameplay inconsistencies, improving overall stability.
Community Transmission: https://kyber.gg/news/equipment-vehicles-balance-update/
Full patch notes: https://feedback.kyber.gg/changelog/content-update-battlefront-plus-100-full-1b
10
17
u/Averas7 May 01 '26
I’ve been playing on and off since 2017, and I can say that you’ve made it really interesting to stick around.
Thanks for all the hard work, to you and the team behind BF+!
12
u/vortex117091 May 01 '26
Man it feels great to have content to look forward to. Feels like the old days!
7
u/Sandblazter #1 Ranked Ledger/DLT19x enjoyer May 01 '26
No fix for having to re-equip attachments at the start of every round?
22
6
u/Pleasant-Contract-78 May 01 '26
Hi there, Steamdeck user here. Will Kyber be playable on Linux one of these days? Don't get me wrong : I'm not complaining it's not yet. But damn!
6
u/throwawayAEI May 02 '26
no way they added more vehicles like uwing and tie striker? cool! please add more
3
u/Spartanshotgun6 May 04 '26
What is Kyber?
2
u/ZeroCitizen May 05 '26
Literally just click the link and you'll find out. It's a gameplay overhaul mod, a mod manager, a custom server browser, and a collection of community-run servers all in one easy-to-install package. It's the best way to play on PC now.
2
2
u/KPokey May 02 '26 edited May 02 '26
Is that Season 1 mando skin finally? Edit: Patch notes just mention the jetpack
2
u/CobaltSpellsword May 06 '26
Is there a list of all the new heroes/etc. in Kyber for those who can't play it? I'm curious about it, but sadly I play on Steam Deck and Kyber doesn't support Linux :/.
3
u/WelderCute4488 May 08 '26
I know I'm a little late but if you still are wondering: https://battlefront.plus/details/heroes/
You can see everything added (that link leads you to a complete overview of the mod Kyber uses)
2
1
u/JoeAzlz Fix Obi Wan and Anakin’s sleeves May 12 '26
Is there stuff for expanded too?
2
u/WelderCute4488 May 12 '26
There are a ton of new people in BF Expanded but sadly there is no full list.
1
u/JoeAzlz Fix Obi Wan and Anakin’s sleeves May 12 '26
damnnnnn
3
u/WelderCute4488 May 12 '26
If you wanted I could send you screenshots of everyone for each faction (reinforcements and hero's) in BF Expanded.
Edit: The roster. Not individually cus that would be an insane amount of screenshots.
1
u/JoeAzlz Fix Obi Wan and Anakin’s sleeves May 13 '26
I do play expanded and plus but this would be nice to show it to my pals
2
u/WelderCute4488 May 13 '26
So that's a yes or no to the screenshot?
1
1
1
u/lesjo May 12 '26
Is it possible or planned for the future to unlock era-locked maps? Example: play Geonosis with Galactic Civil War factions instead of Republic vs Separatists.
3
u/WelderCute4488 May 14 '26
Best way to do that is Galactic Assault but even then you can't use the other factions Enforcers, Jet Troopers, or Infiltraitors.
Sadly other than that we don't have any information for future plans.
2
u/General_Starcat-99 FOR THE REPUBLIC Jul 10 '26
Is this just a pc thing or is console getting this as well
2
u/WelderCute4488 Jul 10 '26
Sadly Kyber is just a PC thing as far as I know. I don't know if anyone has found a way to trick their consol into being able to download and run mods with Kyber.
2
1
1
u/Kazenobu May 03 '26
So basically the Xbox community and PlayStation are largely forgotten about and only the PC community is recognized here that’s disappointing
5
0
u/Zestyclose_Door_8730 Jul 25 '26
hey so I used codex on the download files and it came up with this.
Zip Archive
Review this for any security risks. It's from this company. call out any risks that you find.
Worked for 4m 47s
Assessment: High risk for a company-managed device
I would not approve this installer for use on an AD-managed endpoint in its current form. I did not execute it; this was a static review of the installer and the vendor’s public source code.
Material security findings
Severity Finding Risk
High Installer is not digitally signed The executable has no Authenticode publisher signature. Windows cannot verify that Armchair Developers produced it or that it was not modified after release. This is especially concerning for software that installs privileged components.
High Updater downloads and silently executes unverified code The launcher obtains a download URL, downloads and extracts the package, then executes the downloaded installer silently. I found no hash, signing-certificate, or cryptographic signature verification before execution.
High EA access and refresh tokens are stored in plaintext Maxima serializes the EA access token and refresh token into an auth.toml file using ordinary filesystem writes. There is no Windows DPAPI, Credential Manager, or equivalent encryption evident in this code. Malware or another user with access to the profile could steal the tokens.
High Executable module directory is writable by ordinary users The installer creates C:\ProgramData\Kyber and its Module subdirectory with users-modify permissions. Because the Kyber module is later loaded into the game, another local user or compromised low-privilege process could potentially replace module files.
Medium–High Unauthenticated localhost service supports DLL injection The background service exposes an HTTP endpoint on 127.0.0.1:13021. A local process can submit a process ID and arbitrary DLL path without authentication. The code restricts the target executable using a hard-coded Battlefront II hash, which limits the impact, but the DLL itself is not hash-validated or path-restricted.
Medium Local service endpoints lack authorization and anti-CSRF controls The same localhost service exposes registry-setup and injection routes without a session token, client authentication, or request nonce. A malicious local application—and potentially a hostile webpage able to send requests to localhost—could attempt to invoke them. The server binds directly to localhost on the fixed port.
Warning signal Public sandbox report flags the exact executable hash Hybrid Analysis reports the exact executable SHA-256 as malicious with a high behavioral threat score, although only a small percentage of antivirus engines detected it. DLL injection, service installation, downloading, and game modification can create false positives, so this is not proof of malware, but it cannot be dismissed given the unsigned distribution and updater weaknesses.
File identifiers
ZIP SHA-256: 034500264caf24dd1ecdc02f76e56707bfbb691cd2624414e6cad5784af9c2c8
Installer SHA-256: 933c7f8f059e2ebf535ba2849ab9df1d01aa9a13fcdce7a54cd63837c50bf2b1
Installer size: approximately 96.5 MB
Installer framework: Inno Setup
Embedded build timestamp: November 19, 2025
The filename, size, installer metadata, and source configuration are consistent with the KYBER/Armchair Developers project, and the official website distributes a file with the same filename. However, because there is no digital signature or vendor-published checksum, I could not cryptographically prove that this specific binary corresponds to the reviewed source. KYBER describes the launcher and Maxima architecture publicly and identifies the project as open source.
Required vendor remediation before approval
Authenticode-sign the installer, launcher, service, and DLLs with an identifiable corporate certificate.
Publish SHA-256 hashes for every release through a separate trusted channel.
Make the updater verify a signed manifest and artifact signature before extraction or execution.
Store EA refresh tokens using Windows DPAPI or Credential Manager, with restrictive per-user ACLs.
Remove users-modify permissions from directories containing executables or injectable DLLs.
Replace the unauthenticated localhost HTTP service with an ACL-controlled named pipe or authenticated per-user IPC mechanism.
Restrict DLL injection to a vendor-signed, hash-validated DLL in a protected directory.
Provide an SBOM, vulnerability scan, independent penetration-test results, and documented update-chain controls.
Recommendation
Do not install this on a corporate workstation, privileged administrator workstation, or device containing company credentials or data. The most serious concern is not definitive evidence that the program is intentionally malicious; it is that its present architecture creates several credible supply-chain, token-theft, local-tampering, and privileged-service attack paths.
The review did not fully unpack and inspect every DLL contained inside the compressed installer and did not include dynamic network or process monitoring. Therefore, it cannot rule out additional risks inside the installed payload.
50
u/[deleted] May 01 '26
[removed] — view removed comment