HEIF Heist
Hacktron's HEIF Heist research reveals RCE and heap-leak vulnerabilities in libheif/libde265 HEIF/AVIF decoders, affecting Meta, OpenAI, GitHub Enterprise, Discourse, and Next.js.
82
Product
GitHub Enterprise
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 18, 2026
- Last mentionedSep 20, 2026
Timeline
3 articles · newest firstAI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
Hacktron researchers used Claude Opus 5 to build a libheif exploit in hours, hijacking OpenAI staff accounts via a Discourse forum shared-SSO flaw.
72
Security researchers used Claude to help them hack into OpenAI
Three Hacktron researchers used Claude Opus to breach OpenAI employee accounts through a Discourse HEIF flaw, reaching the Monorepo within 72 hours.
66
Related CVEs
by mentions- CVE-2026-19118<1%7.7Race Condition RCE in GitHub Enterprise Server
Appears with
- Discoursevendor · 3
- Hacktronorganization · 3
- OpenAIvendor · 2
- Next.jsproduct · 2
- GPT-5.6 Solai model · 2
- ImageMagickproduct · 2
- Anthropicvendor · 2
- Claude Opus 4.8ai model · 2
- Codexproduct · 2
- Claude Opus 5ai model · 2
- OpenAIvictim · 2
- Metavendor · 2
- libde265product · 1
- libheifproduct · 1
- Debianvendor · 1
- Slackvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.