How OpenAI got hacked with an image

Why watch

A technical breakdown of how researchers exploited a one-year-old libheif heap overflow vulnerability through a malicious HEIF image to achieve remote code execution on OpenAI's Discourse forum, eventually accessing an employee's ChatGPT account and internal monorepo. This case study demonstrates real-world exploit development, vulnerability chaining, and the evolving attack surface of AI companies.