HackerOne Blog

Code Security

Common production image

Return on Mitigation

The Cost Savings of Fixing Security Flaws in Development

February 25, 2025

There’s no debate that catching and fixing security flaws in development saves time, money, and stress.

Read Now

All

AI

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

An ethical hacker finding an XSS vulnerability

Security Research

How to Find XSS: Techniques Security Researchers Use in Real Environments

April 1, 2026

Learn how to find XSS vulnerabilities and validate real exploitability using techniques trusted by security teams.

Digital landscape

CVE-2025-55182: Unauthenticated React Exploit Affects Millions of Sites

December 5, 2025

A critical CVE-2025-55182 React RCE flaw affects millions of sites. Get impact details, affected versions, indicators of compromise, and urgent remediation steps.

Digital Background

Shai-Hulud 2.0: What Security Leaders Need to Do Now

November 26, 2025

Shai-Hulud 2.0 is a self-replicating npm malware campaign exposing secrets and compromising CI/CD pipelines. Learn how to respond and reduce risk.

Humans in Digital Hallway

Scaling Expert Oversight of AI: HackerOne's Human-in-the-Loop Methodology

August 21, 2025

How HackerOne Code scales secure AI with HiTL validation, combining expert oversight, Explainable AI, and continuous feedback loops.

Swirling Colors in Black

What is CVE-2025-53770? A Critical Microsoft SharePoint Vulnerability and How to Respond

July 23, 2025

CVE-2025-53770 is a critical Microsoft SharePoint vulnerability now under active exploitation. Learn how to respond, assess exposure, and improve visibility with proactive security strategies.

code security

How AI Can Navigate Code and Catch Complex Vulnerabilities

April 7, 2025

One of the questions HackerOne Engineering set out to answer early on was: “Can an...

Common production image

Return on Mitigation

The Cost Savings of Fixing Security Flaws in Development

February 25, 2025

There’s no debate that catching and fixing security flaws in development saves time, money, and stress.

Colorful code and numbers

Exposure Management

Resurrecting Shift-Left With Human-in-the-loop AI

January 16, 2025

Let's explore how human-in-the-loop AI can help implement successful secure-by-design.

HackerOne security researchers

A Guide To Subdomain Takeovers 2.0

September 25, 2024

Learn the ins and outs of understanding subdomain configurations with current resources and tools from an expert security researcher.