Threat Intelligence7 min read
LiteLLM 1.107.0 Compromise: What Happened and How to Respond
LiteLLM 1.107.0 shipped with a credential stealer and a remote-code loader. What was affected, how the malware ran, and how to recover safely.
Ananay Arora
OpenHack Blog
Insights on application security, vulnerability research, and building secure software at scale.
Subscribe via RSSMore from OpenHack
Vulnerability Research4 min read
PHP2Shell: critical PHP vulnerabilities and how to patch
Two critical PHP vulnerabilities allow unauthenticated remote code execution. Check affected versions, install the fixes, and verify your running services.
Ananay Arora
Compliance6 min read
SOC 2 Type 1 vs. Type 2: Compliance Evidence with OpenHack
Understand SOC 2 Type 1 vs. Type 2 and prepare application security evidence with OpenHack's SAST and Supply Chain reports.
Ananay Arora
Vulnerability Research12 min read
CVE-2026-36755: How OpenHack hacked Papermark and got unlimited uploads
How OpenHack found, validated, and verified a missing await that turned Papermark's authenticated upload route into a public pipe for unlimited uploads.
Ananay Arora
Threat Intelligence11 min read
Inside a 37-Package npm Typosquatting Campaign Targeting Windows and WSL
OpenHack correlated 37 npm typosquats carrying the same install-time dropper, decoded its XOR-obfuscated configuration, and traced a Windows and WSL infostealer chain from npm postinstall to credential exfiltration.
Ananay Arora
Announcements5 min read
Introducing OpenHack: Always on AI Security Engineer
OpenHack is your Always on AI Security Engineer. Find the vulnerabilities. Prove the impact. Ship the fix.
Ananay Arora