@donwebmedia.bsky.socialFalla libheif OpenAI: una imagen HEIC llegó al repo
¿Cómo llegó una imagen HEIC al repo interno? Entendé la falla libheif OpenAI, el rol de Claude Opus 5 y cómo parchear tu Discourse hoy, paso a paso
#libheif #openai #discourse #claudeopus5 #seguridad
@securityonline.bsky.socialA WordPress libheif RCE chain and its PoC are now public. The libheif vulnerability turns an HEIC upload into code execution. Patch to 1.23.3.
#WordPress #libheif #RCE #ImageMagick #HEIC #PoC #WebSecurity #Vulnerability
@hacks.grA crafted HEIC image could make some WordPress hosts run code during image processing, Fortbridge showed in a lab.
The test required an account with upl…
@hendryadrian.bsky.socialResearchers used Claude Opus 5 to chain a Discourse image bug and an OpenAI login flaw, briefly taking over employee ChatGPT and Codex accounts and reaching an internal repo. #OpenAI #Discourse #libheif
@hendryadrian.bsky.socialAI researchers uncovered HEIF Heist, a memory corruption flaw in image decoders that can expose data or enable remote code execution via malicious HEIF, HEIC, and AVIF files. #HEIFHeist #libheif #libde265
@stackflag.bsky.socialCVE-2026-84383 - libheif
A flaw in a popular image‑processing library lets specially crafted image files cause a memory overflow when the software resizes them. This can lead to program crashes or…
Too many irrelevant or confusing CVEs? Use stackflag.com
@threadlinqs.bsky.socialAI-generated exploit chained an unflagged libheif bug with an OpenAI SSO flaw to reach internal code. https://intel.threadlinqs.com/threat/TL-2026-2568 #ThreatIntel #Claude #HEIF #libheif
