Moonshot removed cyber-related data from Kimi K3.1 Pro as vulnerability research performance got better as post-training scaled

Sticker of the year:

‼️ Node.js has a Remote Code Execution vulnerability. CVE-2026-111497 is a high-severity bug in its Brotli decoder. Decompressing attacker-controlled data can leak memory or lead to remote code execution. You don’t need to use Brotli directly. Your app could hit this through fetch() or libraries like body-parser. OpenHack supply chain tracks this, patch now!

‼️ Patches for the PHP Vulnerability are out ‼️ Go ahead and patch your servers ASAP. Full article: openhack.com/blog/php2shell-…

DeepSeek v4.1 Flash is now on available on all OpenHack plans! 🎉

Ox Alpha is now available for FREE on OpenHack! Rumored to be an unreleased GLM model, it has no guardrails and has surpassed Fable 5 Max in coding and cybersecurity benchmarks. Use it for free all OpenHack plans until August 27th. Happy Hacking!

GLM 5.3 is now available on OpenHack Pro, Max and Enterprise. Happy Hacking!

‼️ ATTENTION ALL DEFCON ATTENDEES ‼️ Free OpenHack Pro for a month with code "DEFCON34" Thank you for your attention to this matter.

We're offering a whole range of open source models through OpenHack's inference - including all major open source models and OpenAI models. Free credits on signup ⚡️

📣 Introducing the all new OpenHack TUI - an open source terminal interface for security tasks, codebase scanning and pentesting. Connect any model. Scan & auto verify vulnerabilities. Pentest any app. No Guardrails. Live on openhack.com