Vulnerability Management
XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action
Learn about a backdoor vulnerability, its impacts, and the importance of securing open source.
Popular posts
The ICO’s 12-Step Guide to GDPR Compliance
Vulnerability Disclosure,
Security Compliance,
Company Resources,
GDPR,
Compliance
Hack The Pentagon Turns One on HackerOne
Ethical Hacker,
Challenge,
News,
Customer Stories,
Bounty
Key Findings From The Hacker-Powered Security Report: It’s Not Just For Tech (1 of 6)
Security Compliance,
Hacker Powered Security Report
Breach Basics: Preparation for the Inevitable
Company News,
Best Practices,
Company Resources
Discover more with topics that matter to you most.
Application Security
Learn how to prevent vulnerabilities in your applications. We cover current practices in application security, cloud security, API testing, and more.
Ethical Hacker
Ethical hackers, pentesters, and security researchers. We explain everything you need to know about them and how they can help your organization.
Company News
Stay informed of HackerOne partnerships, integrations, hackathon results, and other developments that keep HackerOne customers two steps ahead of cybercriminals.
Blogs From HackerOne's CEO
Read insights from HackerOne Chief Executive Officer Marten Mickos.
Penetration Testing
Follow the latest practices in penetration testing, including API testing, application testing, external networks, internet-facing infrastructure, and more.
Security Compliance
From FedRAMP to GDPR, we’ll help you understand the security requirements of every compliance and regulatory standard. Learn how you can prove compliance.
Vulnerability Management
We cover everything in vulnerability management including discovery, prioritization, assessment, disclosure, and remediation.
Vulnerability Management,
Company Resources
Top Firewall Misconfigurations that Lead to Easy Exploitations by Attackers
September 19th, 2018
Network security should be a major focus for companies moving to the cloud. Cloud networks are exposed to the...
Vulnerability Management,
Vulnerability Disclosure,
Response,
Company Resources
What is a Responsible Disclosure Policy and Why You Need One
August 30th, 2018
Bug bounty programs may capture the majority of headlines in hacker-powered security today, but organizations...
Vulnerability Management,
Customer Stories,
Bounty
Oath Bug Bounty Program Update: $1M in payouts and expansion of the program
August 23rd, 2018
This blog was written by Oath CISO and Paranoid in Chief Chris Nims and originally published on Oath.com. A...
Vulnerability Management,
Vulnerability Disclosure,
Company Resources,
GDPR
Software Vulnerability Disclosure in Europe: Summary and Key Highlights of the European Parliament CEPS Task Force Report
August 14th, 2018
In the autumn of 2017, the Centre for European Policy Studies (CEPS), a European Union think tank, initiated a...
Company News,
Vulnerability Management
CISOs and GDPR: The Top 3 Concerns
May 24th, 2018
GDPR compliance is so relevant today because, well, it comes into effect starting tomorrow, May 25, 2018. The...
Get the latest news and insights beamed directly to you
Vulnerability Management,
Customer Stories,
Bounty
Shopify Thanks Over 300 Hackers, Pays $850,000+ to Hackers in Three Years
April 9th, 2018
Shopify’s commerce platform has awarded hackers more than $850,000 in bounties for helping secure its $55...
Vulnerability Management,
Security At Event,
Vulnerability Disclosure
An Attorney’s View of Vulnerability Disclosure
January 16th, 2018
Vulnerability Disclosure Programs (VDPs) are not only being promoted by more and more organizations and...
Vulnerability Management,
New Program Launch
The European Commission’s First-Ever Bug Bounty Program
December 13th, 2017
The European Commission has selected HackerOne as the platform for their first ever bug bounty program. This...