HEIF Heist describes a class of remote attacks that exploit flaws in HEIF/HEIC/AVIF native decoders (notably libheif and libde265) embedded underneath common image-processing stacks like ImageMagick, libvips, Sharp and standard distro/container images. By uploading crafted .avif/.heic files an attacker can fingerprint the exact decoder version in use and deliver a tailored payload that triggers memory corruption, data exfiltration, or remote code execution. The investigation uncovered real-world impact across many widely used services: an RCE in Discourse, unauthenticated RCE in Next.js AVIF optimization, authenticated RCE in GitHub Enterprise (CVE-2026-19118), RCE on Slack enabling file leaks, and vulnerabilities affecting Meta products and other frameworks - demonstrating a large, language- and framework-agnostic blast radius.
Remediation requires upgrading the underlying libraries (libheif v1.23.2+ and current libde265) and applying distro/security-channel patches, plus architectural hardening: disable untrusted HEIF/AVIF decoding where unnecessary and isolate image processing inside hardened, ephemeral sandboxes. Exploitation is nontrivial - successful attacks require version fingerprinting and tailored payloads, sometimes thousands of uploads - but AI-assisted workflows reduced exploit development to 1-3 days in the researchers’ experiments. The research was conducted by Hacktron’s team led by Harsh Jaiswal with AI assistance, and organizations handling uploads are urged to patch and adopt defense-in-depth measures.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
The SR-71 Blackbird's ancient navigation technology, known as 'R2-D2,' could become crucial for military operations in GPS-denied environments. This method, used historically, is being revisited to enhance future combat capabilities. (twz.com)
Korea's privacy regulator has increased fines for data breaches to up to 10 percent of a company's annual revenue. This change aims to encourage companies to prioritize data protection and prevent leaks. (koreajoongangdaily.com)
More U.S. military deaths during the Iran conflict have not been fully disclosed by the Pentagon. The actual number of casualties is higher than publicly reported. (washingtonpost.com)
Hackers exploited Anthropic's AI model, Claude, to gain unauthorized access to OpenAI's systems. The breach highlights risks in using AI models for security-sensitive operations. (wsj.com)
Linguistic illegibility refers to situations where an LLM's internal computations are not accurately reflected in its language output or probes. Security measures relying on linguistic self-reporting are therefore insufficient, and alternative techniques like taint tracking and sandboxing are necessary to ensure safety. (arxiv.org)
Classified stealth parts of F-35 fighter jets were diverted to Hong Kong by a shipper and have gone missing. The incident raises concerns about security and potential unauthorized access to sensitive military technology. (politico.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.