HackerOne Blog

Exposure Management

7 Predictions Defining the Move to Always-On Cybersecurity in 2026

December 9th, 2025

Security leaders forecast 2026 as the year CTEM becomes essential, with AI-driven threats, agentic security, and continuous validation reshaping cyber risk.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

5 Articles to Get You Up-to-Speed on Bug Bounty Programs

July 7th, 2022

This article shares five valuable resources about bug bounty programs, why they are useful, how...

Exposure Management

Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

July 5th, 2022

MITRE Releases 2022 CWE Top 25 The popular CWE Top 25 list, which ranks the...

Exposure Management

How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours

June 16th, 2022

When PullRequest was acquired, these concerns became HackerOne’s challenges. When we finalized the acquisition, we...

Exposure Management

CISOs: Do You Know the Security Risks of Your Organization's Next M&A?

June 14th, 2022

First, I will discuss the inherent risks associated with M&As as attack surfaces grow. A...

Exposure Management

How to Catch Injection Security Vulnerabilities in Code Review

June 9th, 2022

Understanding Injection Vulnerabilities Injection vulnerabilities exist when information provided by users of the application is...

Protect Critical Infrastructure from Threats

Exposure Management

How Critical Infrastructure Can be Protected from Threats

June 2nd, 2022

Accessing a major critical infrastructure network is very appealing to cybercriminals, as they can maximize...

Exposure Management

Ethical Hackers Help Beiersdorf Minimize Risk and Protect Their Attack Surface

June 2nd, 2022

Beiersdorf’s cybersecurity team is always thinking about the best ways to secure their public-facing assets...

Programmer setting up a security.txt file

Security Compliance

Exposure Management

What Is a Security.txt File and How Can It Help Your Security Program?

May 27th, 2022

What is a security.txt file and how can it help your program?

Exposure Management

Understanding Public and Private Bug Bounties and Vulnerability Disclosure Programs

May 18th, 2022

How Are Bug Bounty Programs and Vulnerability Disclosure Programs Different? Let’s start with the similarities...