Steganographic modification detection and mitigation for enhanced enterprise security

A method comprising:

• at a computing platform, the computing platform having at least one processor and memory:
• generating a copy of a first image, embedded with steganographic modifications comprising modifications to one or bits of a plurality of pixels of the first image, wherein the steganographic modifications comprise malicious software;
• generating a safe first image of the copy of the first image by changing or modifying one or more less significant bits of at least one pixel of the copy of the first image, wherein generating the safe first image of the copy of the first image renders the steganographic modifications ineffective, wherein generating the safe first image comprises inverting bit values of one or more bits beginning from a least significant bit of at least one color component of a plurality of pixels of the copy of the first image by:
• changing bits with a 0 value to a 1 value, and
• changing bits with a 1 value to a 0 value;
• routing the safe first image to an isolation zone system;
• based on receiving an indication from the isolation zone system indicating that the safe first image remains embedded with effective steganographic modifications, modifying the safe first image by inverting an increased number of bits beginning from a least significant bit of at least one color component of a plurality of pixels of the safe first image until a presence of the effective steganographic modifications is no longer detected;
• after identifying that the presence of the effective steganographic modifications is no longer detected, routing the safe first image to a first user device;
• routing the first image to the isolation zone system;
• and
• performing, based on results of execution of the steganographic modifications of the first image in the isolation zone system, one or more security actions.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

• generate a copy of a first image, embedded with steganographic modifications comprising modifications to one or bits of a plurality of pixels of the first image, wherein the steganographic modifications comprise malicious software;
• generate a safe first image by changing or modifying one or more bits beginning from a least significant bit of at least one pixel of the copy of the first image, wherein generating the safe first image of the copy of the first image renders the steganographic modifications ineffective;, wherein generating the safe first image comprises inverting bit values of one or more bits beginning from a least significant bit of at least one color component of a plurality of pixels of the copy of the first image by:
• changing bits with a 0 value to a 1 value, and
• changing bits with a 1 value to a 0 value;
• route the safe first image to an isolation zone system;
• based on receiving an indication from the isolation zone system indicating that the safe first image remains embedded with effective steganographic modifications, modify the safe first image by inverting an increased number of bits beginning from a least significant bit of at least one color component of a plurality of pixels of the safe first image until a presence of the effective steganographic modifications is no longer detected;
• after identifying that the presence of the effective steganographic modifications is no longer detected, route the safe first image to a first user device;
• route the first image to an isolation zone system;
• and
• perform, based on results of execution of the steganographic modifications of the first image in the isolation zone system, one or more security actions.