HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Abstract imagery depicting pentest speed

Offensive Security

Decoding the Characteristics of Modern Pentesting: Speed

February 20, 2024

HackerOne pentest experts explore the "Speed" factor of effective pentesting methods to see how each security testing alternative measures up.

Code Security

Why You Should Consider Using React Over jQuery

February 20, 2024

The choice of frameworks and libraries can significantly impact the functionality, security, and maintainability of...

Code Security

Identifying and Remediating CWE-312 Cleartext Storage of Sensitive Information in Laravel Applications

February 15, 2024

The security of sensitive information within web applications is paramount, especially in today’s digital age...

Code Security

Ensuring Mobile Application Security with Expo

February 14, 2024

In the rapidly evolving world of mobile app development, security remains a paramount concern. With...

Code Security

Designing Algorithms for Controlling Organic Systems: A Journey from Scarcity

February 13, 2024

The concept of managing organic systems with software presents a unique and intriguing challenge. Unlike...

Code Security

Running AI Inference Using EC2 GPUs: An Intro and Comparison to CPUs

February 12, 2024

In the fast-evolving landscape of Artificial Intelligence (AI) and Machine Learning (ML), the demand for...

Code Security

Common Security Issues in Implementing OAuth 2.0 and How to Mitigate Them

February 11, 2024

OAuth 2.0 has become the de facto standard for managing and accessing user permissions over...

Code Security

iOS App Secret Management: Best Practices for Keeping Your Data Secure

February 9, 2024

In the realm of iOS development, managing application secrets like API keys, database passwords, and...

Code Security

Moving Away from requirements.txt for More Secure Python Dependencies

February 7, 2024

In the realm of Python development, managing project dependencies is a critical aspect of ensuring...