HackerOne Blog

Exposure Management

7 Predictions Defining the Move to Always-On Cybersecurity in 2026

December 9th, 2025

Security leaders forecast 2026 as the year CTEM becomes essential, with AI-driven threats, agentic security, and continuous validation reshaping cyber risk.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

HackerOne Spot Checks for On-Demand, Targeted Security Testing

May 28th, 2024

HackerOne Spot Checks: a specialized capability to bridge the gap between limited resources and thorough security.

Exposure Management

What Is a Vulnerability Disclosure Program and Do You Need One?

May 14th, 2024

Are you wondering about Vulnerability Disclosure Programs (VDPs)? Here’s why you need one, and instructions on starting one or improving your current process.

Ethical hackers working on election security

Security Compliance

Exposure Management

How Ethical Hackers Are Securing Elections

May 14th, 2024

Election technology manufacturers teamed up with ethical hackers to secure elections.

Exposure Management

How Serialized Cookies Led to RCE on a WordPress Website

May 9th, 2024

Learn first-hand from a hacker about a Wordpress remote code execution vulnerability: how to identify it, its risks, and remediation.

Hacker discovering prompt injection vulnerability

Exposure Management

How a Prompt Injection Vulnerability Led to Data Exfiltration

April 29th, 2024

As the use of GenAI and LLMs has ramped up, so have the vulnerabilities that come with them, and one of the worst is prompt injection.

Exposure Management

Human-Powered Security: The Value of Ethical Hackers & Bug Bounty

April 23rd, 2024

Who is an ethical hacker, what is a bug bounty program, and why is human-powered security the best method for strengthening your security posture?

Hacker discovering race condition vulnerability

Exposure Management

How a Race Condition Vulnerability Could Cast Multiple Votes

April 11th, 2024

Hacker and Senior Solutions Architect Dane Sherrets tells the story of how a race condition vulnerability could cast multiple votes.

Exposure Management

The Importance of Credential Rotations: Best Practices for Security and Data Protection

April 5th, 2024

Learn the importance of credential rotations and best practices for managing them effectively from HackerOne's experts.

Ethical hacker finding a backdoor vulnerability

Exposure Management

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

April 1st, 2024

Learn about a backdoor vulnerability, its impacts, and the importance of securing open source.