Vulnerability Management
How a Business Logic Vulnerability Led to Unlimited Discount Redemption
Learn about the impact, severity, and a real-world example of business logic vulnerabilities.
Popular posts
The ICO’s 12-Step Guide to GDPR Compliance
Vulnerability Disclosure,
Security Compliance,
Company Resources,
GDPR,
Compliance
Hack The Pentagon Turns One on HackerOne
Ethical Hacker,
Challenge,
News,
Customer Stories,
Bounty
Key Findings From The Hacker-Powered Security Report: It’s Not Just For Tech (1 of 6)
Security Compliance,
Hacker Powered Security Report
Breach Basics: Preparation for the Inevitable
Company News,
Best Practices,
Company Resources
Discover more with topics that matter to you most.
Application Security
Learn how to prevent vulnerabilities in your applications. We cover current practices in application security, cloud security, API testing, and more.
Ethical Hacker
Ethical hackers, pentesters, and security researchers. We explain everything you need to know about them and how they can help your organization.
Company News
Stay informed of HackerOne partnerships, integrations, hackathon results, and other developments that keep HackerOne customers two steps ahead of cybercriminals.
Blogs From HackerOne's CEO
Read insights from HackerOne Chief Executive Officer Marten Mickos.
Penetration Testing
Follow the latest practices in penetration testing, including API testing, application testing, external networks, internet-facing infrastructure, and more.
Security Compliance
From FedRAMP to GDPR, we’ll help you understand the security requirements of every compliance and regulatory standard. Learn how you can prove compliance.
Vulnerability Management
We cover everything in vulnerability management including discovery, prioritization, assessment, disclosure, and remediation.
Vulnerability Management
How a Business Logic Vulnerability Led to Unlimited Discount Redemption
May 16th, 2024
Learn about the impact, severity, and a real-world example of business logic vulnerabilities.
Vulnerability Management,
Security Compliance
How Ethical Hackers Are Securing Elections
May 14th, 2024
Election technology manufacturers teamed up with ethical hackers to secure elections.
Vulnerability Management,
Ethical Hacker
How Serialized Cookies Led to RCE on a WordPress Website
May 9th, 2024
Learn first-hand from a hacker about a Wordpress remote code execution vulnerability: how to identify it, its risks, and remediation.
Generative AI,
Vulnerability Management
How a Prompt Injection Vulnerability Led to Data Exfiltration
April 29th, 2024
As the use of GenAI and LLMs has ramped up, so have the vulnerabilities that come with them, and one of the worst is prompt injection.
Vulnerability Management
Human-Powered Security: The Value of Ethical Hackers & Bug Bounty
April 23rd, 2024
Who is an ethical hacker, what is a bug bounty program, and why is human-powered security the best method for strengthening your security posture?
Get the latest news and insights beamed directly to you
Vulnerability Management
How a Race Condition Vulnerability Could Cast Multiple Votes
April 11th, 2024
Hacker and Senior Solutions Architect Dane Sherrets tells the story of how a race condition vulnerability could cast multiple votes.
Vulnerability Management,
Engineering Blog
The Importance of Credential Rotations: Best Practices for Security and Data Protection
April 5th, 2024
Learn the importance of credential rotations and best practices for managing them effectively from HackerOne's experts.
Vulnerability Management
XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action
April 1st, 2024
Learn about a backdoor vulnerability, its impacts, and the importance of securing open source.