HackerOne is a launch partner in Patch the Planet, a new initiative pairing AI-assisted research with expert human validation to deliver verified fixes to open-source maintainers at scale.

Code Security

Security Research

Engineering

How to Find XSS: Techniques Security Researchers Use in Real Environments

April 1, 2026

Learn how to find XSS vulnerabilities and validate real exploitability using techniques trusted by security teams.

Code Security

CVE-2025-55182: Unauthenticated React Exploit Affects Millions of Sites

December 5, 2025

A critical CVE-2025-55182 React RCE flaw affects millions of sites. Get impact details, affected versions, indicators of compromise, and urgent remediation steps.

Code Security

Shai-Hulud 2.0: What Security Leaders Need to Do Now

November 26, 2025

Shai-Hulud 2.0 is a self-replicating npm malware campaign exposing secrets and compromising CI/CD pipelines. Learn how to respond and reduce risk.

Code Security

Engineering

H1 Code

Scaling Expert Oversight of AI: HackerOne's Human-in-the-Loop Methodology

August 21, 2025

How HackerOne Code scales secure AI with HiTL validation, combining expert oversight, Explainable AI, and continuous feedback loops.

Code Security

What is CVE-2025-53770? A Critical Microsoft SharePoint Vulnerability and How to Respond

July 23, 2025

CVE-2025-53770 is a critical Microsoft SharePoint vulnerability now under active exploitation. Learn how to respond, assess exposure, and improve visibility with proactive security strategies.