HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

H1 Community Team: Your Hacker Allies

June 13, 2022

Jessica Sexton, Director of Community ( Twitter/ LinkedIn) "I am excited to build a team...

Community at HackerOne: What's to Come

June 13, 2022

From Jessica Sexton - Director of Community, Three years ago, I found my home at...

The Top 5 Most Common Security Issues I Discover When Reviewing Code

June 10, 2022

NOTE: The following code examples have been contrived to provide detailed, illustrative representations of real...

Exposure Management

How to Catch Injection Security Vulnerabilities in Code Review

June 9, 2022

Understanding Injection Vulnerabilities Injection vulnerabilities exist when information provided by users of the application is...

What is Confluence CVE-2022-26134 and How Do I Fix It

Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)

June 6, 2022

Background The vulnerability allows unauthenticated remote code execution (RCE). Exploitation occurs by sending an HTTP...

Protect Critical Infrastructure from Threats

Exposure Management

How Critical Infrastructure Can be Protected from Threats

June 2, 2022

Accessing a major critical infrastructure network is very appealing to cybercriminals, as they can maximize...

Exposure Management

Ethical Hackers Help Beiersdorf Minimize Risk and Protect Their Attack Surface

June 2, 2022

Beiersdorf’s cybersecurity team is always thinking about the best ways to secure their public-facing assets...

Programmer setting up a security.txt file

Security Compliance

Exposure Management

What Is a Security.txt File and How Can It Help Your Security Program?

May 27, 2022

What is a security.txt file and how can it help your program?

5 Ways I Provide Value as a PullRequest Reviewer When I Start Reviewing a New Project

May 24, 2022

As shown in Figure 1 below, even early reviews can provide value. Catching Security Vulnerabilities...