HackerOne stories
Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.
Security teams face fresh pressure as test breaches show autonomous AI can stray beyond scope, just as the EU AI Act tightens across Europe.
Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.
The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.
Pressure is mounting on companies to prove AI is governed in real time, as agentic systems take decisions and access sensitive data.
Businesses are narrowing AI deployments to specific tasks as scrutiny grows over costs, returns and the need for human judgement.
Employers risk worsening shortages in cybersecurity and frontline roles unless they open new entry routes and training for young workers.
The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.
New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.
The tie-up gives NCC Group early access to GPT-5.5-Cyber, as OpenAI seeks trusted testers for defensive uses of its cyber tools.
The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.
Rising vulnerability volumes are outpacing fix times, prompting HackerOne to roll out an AI system that feeds confirmed threats into developer tools.
Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.
Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.
Experts say AI is accelerating ransomware attacks, shrinking the patching window and forcing organisations to overhaul defences and recovery plans.
Enterprises face a growing backlog as AI tools uncover more flaws, with HackerOne saying 25% still prove exploitable and many are critical.
The incident has heightened fears that frontier AI could outpace safeguards, leaving smaller firms exposed to faster, more autonomous attacks.
Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.
Seven critical weaknesses were found in live production systems over a weekend, showing AI-driven pentests can now uncover basic flaws cheaply.
