Yara rule and some python scripts for detection and sanitization of Acropalypse (CVE-2023-21036) affected PNG images | Faraday
Yara rule and some python scripts for detection and sanitization of Acropalypse (CVE-2023-21036)
March 23, 2023
One of our researchers Octavio Gianatiempo came up with a YARA to detect and sanitize vulnerable images of Acropalypse in scale. We also added a sanitization script to remove extra information from PNG files.
Check all the information in our GitHub
Additional Articles
How to Participate in Threat Intelligence Sharing (ISACs) Without Exposing Sensitive Data
The open letter on collective cyber defense puts information sharing at the center of its proposal, for cybersecurity companies, governments, and frontier AI companies alike: “Share threat intelligence and tested
August 30, 2026
Agentic Identity Traceability: An Implementation Guide
One of the most technically specific points in the open letter on collective cyber defense is this one: “Build observability and security tools, ensure agentic identities are traceable and accountable,
August 30, 2026
How to Review AI-Generated Code With the Same Rigor as Human Code
The open letter on collective cyber defense includes a line that many development teams still haven’t translated into concrete process: “Raise the security bar for what you buy, build, and
August 30, 2026