HEIF Heist: libheif flaws allowed researchers to hack OpenAI, Slack, Meta and more
tszzl · x · 2026-09-18
Researchers are disclosing HEIF Heist, a months-long investigation into the libheif image decoding library. The chain of vulnerabilities enabled them to compromise OpenAI, Slack, Meta, GitHub Enterprise, Rails, Next.js, ImageMagick, and many other widely used services and frameworks. The team calls it a real-life xkcd #234: one obscure image library sitting beneath a huge portion of the modern internet.
More from Infra
- NEURA launches Neuron AI, but Europe's Physical AI test is whether the stack matures together — ingliguori · 2026-11-04
- S3-based databases cache in memory and NVMe, making disk vs S3 latency gap smaller than expected — mgill25 · 2026-11-04
- gpu-unlock project claims up to 2x FP16 tensor throughput for RTX 20/30/40 cards — paranoidray · 2026-11-04
- These 10 GPU optimization papers are why your model runs fast today — NandoDF · 2026-11-04
- One prompt to audit cross-region traffic: dev cut trans-Atlantic latency by moving a service — DanielLockyer · 2026-11-04
- SurrealDB 4 launches as multi-model ACID database for the agentic era — Scobleizer · 2026-11-04