Twitxy Saved

Harsh Jaiswal

Verified account Hacktron AI

@rootxharsh

Co-founder and research @hacktronai | auditing at
@cure53berlin | prev @zomato @vimeo @pdiscoveryio @httpvoid0x2f
Joined April 2015
1.3K Following 28K Followers 3.5K Posts

Latest posts 5

Harsh Jaiswal Verified account @rootxharsh
This is such a good explanation of the slack libheif bug we exploited!
LiveOverflow 🔴 hextree.io Verified account @LiveOverflow 3d
Remember the Heap Buffer Overflow in libheif 1.19.7, which was used by @rootxharsh to hack into OpenAI?

Here is a .heic file from a iPhone photo, which actually contains several images. And the primary image is actually derived from a grid of smaller images. 🧵1/x
View quoted post on X
2 replies 0 reposts 51 likes 4.4K views View on X
Harsh Jaiswal Verified account @rootxharsh
Michael Grinich Verified account @grinich Nov 2
I want to share some context on a security incident we discovered on October 30.

First, the most important thing: WorkOS's production systems are secure. No customer platform data was accessed. This incident was isolated to internal GTM systems.

The attack involved ARTEX, an autonomous AI agent framework used to carry out offensive security operations. It's a striking example of how quickly the capabilities of attackers are evolving.

We've contained the incident, brought in independent experts to investigate, and are working through the details.

Security is something we take extremely seriously, and I believe in being transparent when things go wrong. We'll continue to share updates as we learn more.

Full details: workos.com/security/bulle…
View quoted post on X
0 replies 1 reposts 40 likes 3.7K views View on X