JXL file delivered by browser/mail/chat then opened by ffmpeg (CVE-2026-111497)

Suraj A@cytech

•updated yesterday•4•0•4

Detects the creation or modification of a .jxl file by a web browser, email client, or chat application in download or temp directories, followed closely by the execution of ffmpeg referencing the .jxl file within a 15-minute window.