HackerOne Blog

Exposure Management

Exposure Management

Crowdsourced Security

Gain Actionable, Data-backed Insights with HackerOne Recommendations

February 6th, 2025

What if your security program could self-optimize? With HackerOne Recommendations, it can.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

How HackerOne Disproved an MFA Bypass With a Spot Check

November 13th, 2024

Read how HackerOne's internal security team disproved an alleged MFA bypass with a targeted Spot Check.

Ethical hackers fixing improper access control vulnerabilities

Exposure Management

How an Improper Access Control Vulnerability Led to Account Theft in One Click

November 6th, 2024

Let’s look more closely at the improper access control vulnerability type — what it is, how it’s used, and how to remediate it.

Exposure Management

How an Information Disclosure Vulnerability Led to Critical Data Exposure

November 5th, 2024

Information disclosure is the #2 most common security vulnerability. Learn what information disclosure is, its impacts, and how to prevent it.

Ethical hacker finding XSS vulnerabilities

Exposure Management

How a Cross-Site Scripting Vulnerability Led to Account Takeover

November 4th, 2024

Cross-site scripting (XSS) is the number one most common security vulnerability. Learn what XSS is, its impacts, and how to prevent it.

Hacker discovering a business logic vulnerability

Exposure Management

How a Business Logic Vulnerability Led to Unlimited Discount Redemption

November 1st, 2024

Learn about the impact, severity, and a real-world example of business logic vulnerabilities.

Exposure Management

Measure, Compare, and Enhance Security Programs with HackerOne Benchmarks

October 24th, 2024

HackerOne Benchmarks is a set of features designed to provide insights for optimizing your security program’s performance.

Exposure Management

OWASP Top 10: The Risk of Cryptographic Failures

October 21st, 2024

Cryptographic failures: what are they and why are they considered so concerning by the OWASP Top 10?

Exposure Management

Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen

October 17th, 2024

The file upload vulnerability type is as broad in scope as the number of different...

Security researcher finding IDOR vulnerability

Exposure Management

Offensive Security

How an IDOR Vulnerability Led to User Profile Modification

October 8th, 2024

Learn the ins and outs of IDOR vulnerabilities and how one exploitation led to malicious user profile modification.