
Claude Opus 5 Helps Researchers Weaponize HEIF Image Flaw Into Remote Code Execution
Researchers used Claude Opus 5 to help weaponize a HEIF image processing flaw into a remote code execution exploit.
6 stories, newest first · one card per story

Researchers used Claude Opus 5 to help weaponize a HEIF image processing flaw into a remote code execution exploit.

Hacktron researchers used Claude Opus 5 to chain a libheif flaw and OpenAI SSO weakness, taking over staff ChatGPT and Codex accounts; OpenAI paid $6,500.

Hacktron researchers used Claude Opus 5 to exploit libheif and an SSO flaw, taking over OpenAI employee ChatGPT and Codex accounts within 72 hours.

Researchers used Claude Opus 5 to chain libheif and Discourse flaws, hijacking OpenAI employee ChatGPT and Codex accounts via bug bounty.

Researchers used Claude Opus 5 to build a libheif exploit that compromised OpenAI's forum, hijacked employee ChatGPT/Codex accounts, and reached the internal monorepo.

GitHub's Project HydraFusion research preview builds per-task multi-model workflows (Single, Cascade, Critique) in Copilot CLI, reporting +4.9 quality at 67% lower cost on TerminalBench 2.1.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views