The Top Researcher Signals From HackerOne’s 2025 HPSR

The 9th Hacker-Powered Security Report describes how AI is reshaping vulnerability discovery: automated hackbots are expanding baseline coverage, AI-related findings (notably prompt injection) have surged year-over-year, and researchers are shifting focus from payload-focused issues like XSS toward architecture and logic flaws that produce higher-impact results; the report also notes that AI tools augment researcher workflows but do not replace human judgment, and that incentives continue to drive researcher attention.