diff --git a/content/images/chavezcandanga-web.jpg b/content/images/chavezcandanga-web.jpg
deleted file mode 100644
index 9d3ad2b7..00000000
Binary files a/content/images/chavezcandanga-web.jpg and /dev/null differ
diff --git a/content/images/chavezcandanga-web.webp b/content/images/chavezcandanga-web.webp
new file mode 100644
index 00000000..f16b85a8
Binary files /dev/null and b/content/images/chavezcandanga-web.webp differ
diff --git a/content/images/leap_second_monotonic_vs_wall_clock.png b/content/images/leap_second_monotonic_vs_wall_clock.png
deleted file mode 100644
index 18c6c574..00000000
Binary files a/content/images/leap_second_monotonic_vs_wall_clock.png and /dev/null differ
diff --git a/content/images/leap_second_monotonic_vs_wall_clock.webp b/content/images/leap_second_monotonic_vs_wall_clock.webp
new file mode 100644
index 00000000..37bdc21a
Binary files /dev/null and b/content/images/leap_second_monotonic_vs_wall_clock.webp differ
diff --git a/content/images/who-is-chavezcandanga-com.jpg b/content/images/who-is-chavezcandanga-com.jpg
deleted file mode 100644
index ea75b3d7..00000000
Binary files a/content/images/who-is-chavezcandanga-com.jpg and /dev/null differ
diff --git a/content/images/who-is-chavezcandanga-com.webp b/content/images/who-is-chavezcandanga-com.webp
new file mode 100644
index 00000000..c44042ee
Binary files /dev/null and b/content/images/who-is-chavezcandanga-com.webp differ
diff --git a/content/leap-second-chaos-2012.md b/content/leap-second-chaos-2012.md
index 201f685b..d44f5c2c 100644
--- a/content/leap-second-chaos-2012.md
+++ b/content/leap-second-chaos-2012.md
@@ -63,7 +63,7 @@ sudo /etc/init.d/ntp start
 - **Leap Smearing**: Today's `ntpd`, `chronyd`, and cloud providers use "leap smear", slowly adjusting clocks over hours to avoid time jumps entirely.
 - **Use Monotonic Clocks**: Time-sensitive logic should rely on `CLOCK_MONOTONIC`, not wall-clock time, to measure durations safely.
 
-![Line chart titled "Leap Second: Wall Clock vs Monotonic Time" plotting reported time against elapsed monotonic time. Both lines rise together from 0 through 4. At the leap-second insertion (annotated 23:59:60), wall-clock time flattens for one second while monotonic time keeps climbing. Wall-clock then resumes its climb one tick behind monotonic for the rest of the chart.]({static}/images/leap_second_monotonic_vs_wall_clock.png)
+![Line chart titled "Leap Second: Wall Clock vs Monotonic Time" plotting reported time against elapsed monotonic time. Both lines rise together from 0 through 4. At the leap-second insertion (annotated 23:59:60), wall-clock time flattens for one second while monotonic time keeps climbing. Wall-clock then resumes its climb one tick behind monotonic for the rest of the chart.]({static}/images/leap_second_monotonic_vs_wall_clock.webp)
 *Figure: Monotonic time continues uninterrupted while wall-clock time repeats a second, highlighting why monotonic clocks are preferred for duration tracking.*
 
 - **Monitor Clock Drift**: Observability pipelines should expose clock sync state and NTP drift as first-class metrics.
diff --git a/content/venezuela-twitter-proxy-osint-final.md b/content/venezuela-twitter-proxy-osint-final.md
index 04ce297d..bb2759c1 100644
--- a/content/venezuela-twitter-proxy-osint-final.md
+++ b/content/venezuela-twitter-proxy-osint-final.md
@@ -59,7 +59,7 @@ whois chavezcandanga.org.ve
 
 Revealed that the domain was registered to **PSUV** (*Partido Socialista Unido de Venezuela*) and managed through CONATEL, Venezuela's FCC-equivalent telecommunications regulator.
 
-![WHOIS output showing chavezcandanga.org.ve registered to PSUV]({static}/images/who-is-chavezcandanga-com.jpg)
+![WHOIS output showing chavezcandanga.org.ve registered to PSUV]({static}/images/who-is-chavezcandanga-com.webp)
 *Figure: WHOIS lookup confirms chavezcandanga.org.ve is registered to PSUV, with administrative and technical contacts using @psuv.org.ve emails.*
 
 ---
@@ -71,7 +71,7 @@ The same server IP hosted:
 - `mensajes.chavezcandanga.org.ve` - a campaign messaging platform
 - A proxy script that mirrored Twitter's login screen
 
-![Screenshot of chavezcandanga.org.ve auto-retweet app]({static}/images/chavezcandanga-web.jpg)
+![Screenshot of chavezcandanga.org.ve auto-retweet app]({static}/images/chavezcandanga-web.webp)
 *Figure: The official chavezcandanga.org.ve campaign app asks users to authenticate with Twitter to enable automatic retweets of Chávez's posts.*
 
 At the time of discovery, this site **did not contain malicious code**, but the potential for **credential harvesting** during peak election activity was substantial. The authentication flow mimicked Twitter's branding and prompted users to log in, creating a window for silent credential capture, token misuse, or targeted amplification based on follower behavior.