#libheif
-
HEIF Heist: an attack on image decoders threatens entire ecosystems
Researchers at Hacktron have described a class of vulnerabilities in native HEIF, HEIC and AVIF decoders that allow remote code execution and data leakage through image uploads.
-
AI Helped Hijack OpenAI Employee Accounts Through a Chain of Vulnerabilities
Using Claude Opus 5, Hacktron researchers chained two vulnerabilities together, hijacked the ChatGPT and Codex accounts of OpenAI employees, and reached an internal repository. This was legitimate research, not a real attack.