Hackerone logo
26
Jan
2025

What Is an Information Disclosure Vulnerability? [Examples]

HackerOne’s 8th Annual Hacker-Powered Security Report states that information disclosure is the third most common vulnerability reported in bug bounty and…

Hackerone logo
26
Jan
2025

What Is It & How to Remediate

HackerOne’s 8th Annual Hacker-Powered Security Report states that improper access control is the second most common vulnerability reported in a bug…

Hackerone logo
26
Jan
2025

Unlocking Engagement with Employee Feedback

Since 2018, HackerOne has maintained an employee engagement survey participation rate of over 80%, with half of the surveys achieving…

Hackerone logo
26
Jan
2025

How HackerOne Disproved an MFA Bypass With a Spot Check

What Is a Spot Check? A Spot Check is a powerful tool for security teams to do a tightly focused and…

Hackerone logo
26
Jan
2025

HackerOne’s Fall Day of Service

Employees had the chance to connect over shared goals and values, fostering stronger relationships beyond the workplace. This event generated…

Hackerone logo
26
Jan
2025

AI in SecOps: How AI is Impacting Red and Blue Team Operations

Integrating AI into SOCs The integration of AI into security operations centers (SOCs) and its impact on the workforce are…

Hackerone logo
26
Jan
2025

Flexible Data Retrieval at Scale with HAQL

What is HAQL? Back in 2022, we were faced with a challenge: we wanted to build useful, actionable dashboards for…

Hackerone logo
26
Jan
2025

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

Q: Please introduce yourself. Tell us what you do at REI and why cybersecurity is important to REI. A: I’m…

Hackerone logo
26
Jan
2025

How HackerOne Employees Stay Connected and Have Fun

This year, we launched new initiatives designed to bring people together in fun and innovative ways, including playing online games,…

TalkTalk
26
Jan
2025

TalkTalk investigates breach after data for sale on hacking forum

UK telecommunications company TalkTalk is investigating a third-party supplier data breach after a threat actor began selling alleged customer data…

Hackerone logo
26
Jan
2025

How an MFA Bypass Led to Account Takeover [Plus 11 Authentication Tips]

Many Facets, One Goal A common trope in cybersecurity is “don’t roll your own auth.” There’s a reason for this: implementing…

PayPal
25
Jan
2025

PayPal to pay $2 million settlement over 2022 data breach

New York State has announced a $2,000,000 settlement with PayPal over charges it failed to comply with the state’s cybersecurity regulations,…