HackerOne Blog

Exposure Management

7 Predictions Defining the Move to Always-On Cybersecurity in 2026

December 9, 2025

Security leaders forecast 2026 as the year CTEM becomes essential, with AI-driven threats, agentic security, and continuous validation reshaping cyber risk.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

What Is a Vulnerability Disclosure Program and Do You Need One?

May 14, 2024

Are you wondering about Vulnerability Disclosure Programs (VDPs)? Here’s why you need one, and instructions on starting one or improving your current process.

Ethical hackers working on election security

Security Compliance

Exposure Management

How Ethical Hackers Are Securing Elections

May 14, 2024

Election technology manufacturers teamed up with ethical hackers to secure elections.

Exposure Management

How Serialized Cookies Led to RCE on a WordPress Website

May 9, 2024

Learn first-hand from a hacker about a Wordpress remote code execution vulnerability: how to identify it, its risks, and remediation.

Hacker discovering prompt injection vulnerability

Exposure Management

How a Prompt Injection Vulnerability Led to Data Exfiltration

April 29, 2024

As the use of GenAI and LLMs has ramped up, so have the vulnerabilities that come with them, and one of the worst is prompt injection.

Exposure Management

Human-Powered Security: The Value of Ethical Hackers & Bug Bounty

April 23, 2024

Who is an ethical hacker, what is a bug bounty program, and why is human-powered security the best method for strengthening your security posture?

Hacker discovering race condition vulnerability

Exposure Management

How a Race Condition Vulnerability Could Cast Multiple Votes

April 11, 2024

Hacker and Senior Solutions Architect Dane Sherrets tells the story of how a race condition vulnerability could cast multiple votes.

Exposure Management

The Importance of Credential Rotations: Best Practices for Security and Data Protection

April 5, 2024

Learn the importance of credential rotations and best practices for managing them effectively from HackerOne's experts.

Ethical hacker finding a backdoor vulnerability

Exposure Management

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

April 1, 2024

Learn about a backdoor vulnerability, its impacts, and the importance of securing open source.

Exposure Management

DevSecOps: How GitHub Bridges the Gap Between Security and Development

March 19, 2024

As a company that prizes security while serving tens of millions of developers worldwide, GitHub...