s1r1us(@S1r1u5_):it’s not just openai. the vulnerability goes much deeper. check out my co-founder harsh’s thread on how far this goes, including a slack vulnerability that could potentially expose companies’ uploaded attachments, and meta vulnerability that affects their core image parser. he’s the mastermind behind it and the one who opened pandora’s box

2026.09.18 05:55

it’s not just openai. the vulnerability goes much deeper. check out my co-founder harsh’s thread on how far this goes, including a slack vulnerability that could potentially expose companies’ uploaded attachments, and meta vulnerability that affects their core image parser. he’s the mastermind behind it and the one who opened pandora’s box

Harsh Jaiswal@rootxharsh

2026.09.18 04:19

We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more. It was literally xkcd #234#, one obscure image library beneath a huge number of apps. 🧵