AI attack chains turn medium findings into criticals. Why severity-sorted queues fail, and what chain-aware vulnerability prioritization looks like instead.

CTEM

CTEM for AI Systems: How to Apply the 5-Stage Framework to Your AI Attack Surface

July 10, 2026

AI systems break traditional CTEM programs. Here's how to extend the five-stage framework to cover language models, agentic workflows, and training pipelines and close the gap before attackers do.

Security Research

Why the Best Researchers Are Thriving in the Age of AI

June 30, 2026

A HackerOne researcher who's crossed $1 million in earnings explains how he uses agentic AI to multiply his output, and why business logic flaws still require human judgment.

CTEM

Ask Us Anything: Closing the Discovery-Remediation Gap

June 25, 2026

AI is accelerating vulnerability discovery, but remediation workflows haven't kept pace. HackerOne leaders break down how organizations are building toward CTEM and what it takes to prioritize, validate, and fix what actually matters.

Public Policy

What You Need to Know About the New AI Executive Order

June 2, 2026

The new AI Executive Order shifts federal cybersecurity focus from vulnerability discovery to validation, remediation, and coordinated disclosure. Here's what the order means for security leaders and what to watch during implementation.

HackerOne News

Navigating the AI Wave: How We're Keeping Security Research Meaningful

May 29, 2026

A 100%+ surge in AI-assisted bug bounty submissions changed how HackerOne thinks about quality, triage, and researcher accountability. Here's what we learned navigating the wave and how we're building for what's next.

Exposure Management

CTEM

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Exposure Management

GPT-5.5 vs Claude Opus 4.7 vs Sonnet 4.6: OpenAI's Frontier Cyber Model Faces Anthropic's Best on Vulnerability Validation

May 6, 2026

We benchmarked GPT-5.5, Claude Opus 4.7, and Sonnet 4.6 on CVEs and real reports to judge vulnerability exploitability with speed and accuracy.