Closing the Exposure Gap: What pixiv Learned About Continuous Security Testing 2026-06-10 35 True Continuous Threat Exposure Management and the Remediation Crisis 2026-06-10 70 True AI Vulnerability Discovery Is Outpacing Remediation 2026-06-10 80 True Vulnerability Exploitability: GPT-5.5 vs Claude Benchmarks 2026-05-10 0 True Continuous Security Validation in Practice: XSS Workflow Case Study 2026-04-14 25 True How to Find XSS Vulnerabilities: Practical Security Guide 2026-04-07 15 True Roni Carta: From Bug Bounties to Building a Safer Supply Chain 2026-01-29 78 True The Top Researcher Signals From HackerOne’s 2025 HPSR 2026-01-06 35 True CVE-2025-55182: Critical React Exploit Hits Millions of Sites 2025-12-06 95 True Shai-Hulud 2.0: Responding to the npm Worm Threatening CI/CD Security 2025-11-26 90 True HackerOne Incident Update: Salesforce 2025-11-10 50 True AI Security Findings Outpace Cybersecurity Remediation in 2025 2025-10-27 50 True AI Security Risks and Vulnerabilities Enterprises Must Address 2025-09-30 75 True GCP Security Configuration Review and Best Practices 2025-08-12 50 True Pentesting your external network with HackerOne 2025-08-06 70 True Pentesting for APIs and Best Practices 2025-08-04 75 True Pentesting for Web Applications 2025-07-31 10 True AWS Security Configuration Review and Best Practices 2025-07-30 25 True CVE-2025-53770: What Security Teams Need to Know About the SharePoint RCE Vulnerability 2025-07-23 85 True Pentesting for iOS Mobile Applications 2025-07-08 20 True How a GraphQL Bug Resulted in Authentication Bypass 2025-07-08 70 True A Guide To Subdomain Takeovers 2.0 2025-07-08 55 True Pentesting for AI and Large Language Models 2025-07-08 50 True Securing Our Elections Through Vulnerability Testing and Disclosure 2025-06-27 15 True Testing Hai Insight Agent in Our Bug Bounty Program 2025-06-24 65 True 10 Steps to Avoid Social Engineering Attacks 2025-05-21 70 True Smart Contracts: Common Vulnerabilities and Real-World Cases 2025-05-13 60 True Pentesting for Android Mobile Applications 2025-05-07 20 True Lessons from Crypto Exploits 2025-03-10 82 True Join HackerOne’s Ambassador World Cup 2025-02-19 55 True The OWASP Top 10 for LLMs 2025: How GenAI Risks Are Evolving 2024-12-18 15 True Azure Cloud Configuration Review 2024-12-13 40 True How a Privilege Escalation Led to Unrestricted Admin Account Creation in Shopify 2024-12-12 55 True How HackerOne Disproved an MFA Bypass With a Spot Check 2024-11-27 30 True How an Improper Access Control Vulnerability Led to Account Theft in One Click 2024-11-27 75 True How an Information Disclosure Vulnerability Led to Critical Data Exposure 2024-11-27 60 True How a Cross-Site Scripting Vulnerability Led to Account Takeover 2024-11-27 50 True How a Business Logic Vulnerability Led to Unlimited Discount Redemption 2024-11-27 45 True Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen 2024-11-27 70 True Pentesting for Internal Networks 2024-11-27 65 True How an IDOR Vulnerability Led to User Profile Modification 2024-11-27 70 True Common Ecommerce Vulnerabilities: Reflected XSS 2024-11-27 50 True How Ethical Hackers Are Securing Elections 2024-11-27 15 True How Serialized Cookies Led to RCE on a WordPress Website 2024-11-26 70 True How a Prompt Injection Vulnerability Led to Data Exfiltration 2024-11-26 60 True How a Race Condition Vulnerability Could Cast Multiple Votes 2024-11-26 45 True XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action 2024-11-26 78 True AI Safety vs. AI Security 2024-11-26 55 True Meet HackerOne’s Brand Ambassadors That Break the Hacker Stereotype 2024-11-26 70 True (Best) Practice Makes Perfect 2024-11-26 15 True 
