HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

How to Catch Injection Security Vulnerabilities in Code Review

January 30, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Exposure Management

Nine Months into the DIB-VDP Pilot, Nearly 1,000 Valid Vulnerabilities Have Been Identified

January 28, 2022

Maintaining the security of the digital assets within the Defense Industrial Base (DIB) contractor networks...

Code Security

Yes, You Will Take Down Production (And That's Okay)

January 27, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Code Security

Navigating Time Pressure in the Code Review Process

January 26, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Code Security

How Giant Data Leaks Happen - Understanding Cryptographic Failures (OWASP Number 2 for 2021)

January 23, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Code Security

My Experience Onboarding as a PullRequest Reviewer

January 19, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

The Global Top 10 is a valuable resource and can help organizations prioritize reported vulnerabilities.

The HackerOne Global Top 10—Hacker Expertise, Industry Data, and Up-to-Date Vulnerabilities

January 14, 2022

Many security teams use the OWASP Top 10 as a guideline to understand where they...

Code Security

What We Can Learn from the Ruby on Rails Project about Code Review

January 11, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Code Security

5 Ways I Provide Value as a PullRequest Reviewer When I Start Reviewing a New Project

January 6, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...