WebP

The camera app maker Halide has published a detailed write-up on decoding WebP images in a memory-safe way, rather than relying on the widely used native libwebp code, which has a history of serious security vulnerabilities. The piece walks through why memory safety matters in image parsing and how a safe implementation can replace risky native decoding on Apple platforms.

Security researchers are warning about a phishing site hosted at instagram.webpromotion-business.site, which mimics an Instagram dashboard to trick users into handing over credentials. The domain has been defanged and submitted to urlDNA for scanning, with the analysis shared in cybersecurity circles. Nobody has confirmed victims yet, and the site's operators are unknown.