HackerOne Blog

Exposure Management

7 Predictions Defining the Move to Always-On Cybersecurity in 2026

December 9, 2025

Security leaders forecast 2026 as the year CTEM becomes essential, with AI-driven threats, agentic security, and continuous validation reshaping cyber risk.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

July 5, 2022

MITRE Releases 2022 CWE Top 25 The popular CWE Top 25 list, which ranks the...

Exposure Management

How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours

June 16, 2022

When PullRequest was acquired, these concerns became HackerOne’s challenges. When we finalized the acquisition, we...

Exposure Management

CISOs: Do You Know the Security Risks of Your Organization's Next M&A?

June 14, 2022

First, I will discuss the inherent risks associated with M&As as attack surfaces grow. A...

Exposure Management

How to Catch Injection Security Vulnerabilities in Code Review

June 9, 2022

Understanding Injection Vulnerabilities Injection vulnerabilities exist when information provided by users of the application is...

Protect Critical Infrastructure from Threats

Exposure Management

How Critical Infrastructure Can be Protected from Threats

June 2, 2022

Accessing a major critical infrastructure network is very appealing to cybercriminals, as they can maximize...

Exposure Management

Ethical Hackers Help Beiersdorf Minimize Risk and Protect Their Attack Surface

June 2, 2022

Beiersdorf’s cybersecurity team is always thinking about the best ways to secure their public-facing assets...

Programmer setting up a security.txt file

Security Compliance

Exposure Management

What Is a Security.txt File and How Can It Help Your Security Program?

May 27, 2022

What is a security.txt file and how can it help your program?

Exposure Management

Understanding Public and Private Bug Bounties and Vulnerability Disclosure Programs

May 18, 2022

How Are Bug Bounty Programs and Vulnerability Disclosure Programs Different? Let’s start with the similarities...

Exposure Management

Announcing the Results of the 12-month DIB-VDP Pilot

May 2, 2022

Learn more about the DoD DIB-VDP Pilot here.