HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Why Retail and E-commerce Organizations Trust Security Researchers During the Holiday Shopping Season

November 27, 2024

Security leaders at REI, AS Watson, and Mercado Libre explain why retail and e-commerce organizations trust security researchers.

Security Compliance

Offensive Security

Network and Information Systems Directive (NIS2) Compliance: What You Need to Know

November 26, 2024

Learn about the new NIS2 Directive requirements and how to achieve compliance through pentesting, VDP, and bug bounty.

5 Insights Attendees Gained from the Security@ World Tour

November 25, 2024

Read the top 5 learnings attendees gained by joining one of our Security@ 2024 World Tour events.

Exposure Management

Breaking Down the OWASP Top 10: Injection

November 21, 2024

Gain insights into injection vulnerabilities, the different classifications, and potential security bypass techniques.

Exposure Management

How Inadequate Authentication Logic Led to an MFA Bypass and Account Takeover

November 20, 2024

Learn how inadequate authentication logic led to an MFA bypass, plus 11 authentication best practices to prevent vulnerabilities like these.

Culture & Talent

How HackerOne Employees Stay Connected and Have Fun

November 19, 2024

This year, we launched new initiatives designed to bring people together in fun and innovative...

Exposure Management

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

November 18, 2024

REI's senior application security engineer discusses their program success, evolving goals, and the value of the security researcher community.

Flexible Data Retrieval at Scale with HAQL

November 15, 2024

HAQL: HackerOne's simplified query interface for writing performant aggregate queries on tables modeled purposefully for data analysis.

AI in SecOps: How AI is Impacting Red and Blue Team Operations

November 15, 2024

View survey results and analysis of how AI in SecOps is impacting red and blue team operations.