HackerOne Blog

The latest from HackerOne

A Call for a New Cybersecurity Measurement Standard

February 26th, 2025

Cybersecurity initiatives provide financial value to organizations. Still, translating the benefits of cybersecurity into dollars and cents has long been a challenge for security teams.

Read Now

All

Culture and Talent

Customer Stories

Engineering

From The CEO

News & Updates

Public Policy

Researcher Community

Vulnerability Management

How an Information Disclosure Vulnerability Led to Critical Data Exposure

November 5th, 2024

Information disclosure is the #2 most common security vulnerability. Learn what information disclosure is, its impacts, and how to prevent it.

Ethical hacker finding XSS vulnerabilities

Vulnerability Management

How a Cross-Site Scripting Vulnerability Led to Account Takeover

November 4th, 2024

Cross-site scripting (XSS) is the number one most common security vulnerability. Learn what XSS is, its impacts, and how to prevent it.

Hacker discovering a business logic vulnerability

Vulnerability Management

How a Business Logic Vulnerability Led to Unlimited Discount Redemption

November 1st, 2024

Learn about the impact, severity, and a real-world example of business logic vulnerabilities.

AI Safety & Security

Who Should Own AI Risk at Your Organization?

October 30th, 2024

Explore who is accountable for AI risk within organizations and how to empower them to own the responsibility.

Securing Our Elections Through Vulnerability Testing and Disclosure

October 28th, 2024

Learn how security researchers are securing election technology though vulnerability testing and disclosure.

Vulnerability Management

Measure, Compare, and Enhance Security Programs with HackerOne Benchmarks

October 24th, 2024

HackerOne Benchmarks is a set of features designed to provide insights for optimizing your security program’s performance.

Penetration Testing

AWS Security Configuration Review and Best Practices

October 23rd, 2024

Learn the ins and outs of AWS security configuration testing and why community-driven PTaaS is the best method.

Vulnerability Management

OWASP Top 10: The Risk of Cryptographic Failures

October 21st, 2024

Cryptographic failures: what are they and why are they considered so concerning by the OWASP Top 10?

Vulnerability Management

Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen

October 17th, 2024

The file upload vulnerability type is as broad in scope as the number of different...