HackerOne CEO says humans still better than AI at judging business impact of vulnerabilities
According to HackerOne CEO Kara Sprague, humans excel at assessing business consequences of flaws while AI finds vulnerabilities at scale
1
Stories per day · 30 days
2 RSS
Relatedbug-bounty3vulnerability-disclosure3curl2ai-generated-reports1bugcrowd1crowdsourced-security1cvss1github1gitlab1huntr1integer-overflow1libcurl1pentesting1rce1regular-expressions1security-research1severity-scoring1web31
10 stories, newest first · one card per story
Stories tagged #hackerone
GitLab patches max-severity regex compiler RCE (CVE-2026-110264)
Unauthenticated users can run code via integer overflow when a crafted regular expression is compiled.
curl will handle low and medium vulnerability reports in public
From October 26, 2026, only high and critical reports stay private on HackerOne; over 90% of recent submissions were below high.
Curl moves low and medium vulnerability reports public on October 26
High and critical reports stay private; Stenberg says over 90 percent of recent submissions were below high.
2
LLMs overestimate CVSS severity on bug bounty reports
Best prompting reached 49.58% level accuracy on 240 vendor-validated Huntr reports; fine-tuning a 7B model hit 56.25%.
12 Best Bug Bounty Platforms Compared (2026): Features & Pricing
A 2026 comparison ranks twelve bug bounty platforms, with HackerOne, Bugcrowd, Intigriti, and Synack leading.
10
Top 10 Best Bug Bounty Platforms in 2026 [Ranked & Scored]
A 2026 ranking places HackerOne, Bugcrowd, and Intigriti as the leading bug bounty platforms.
9
Google pauses open source bug bounty program after rise in AI submissions
Google paused its open-source bug bounty after invalid, mostly automated AI submissions overwhelmed reviewers.
GitLab urges users to patch max severity path traversal flaw
GitLab urges self-managed users to immediately patch a maximum-severity path traversal flaw (CVE-2023-2825) enabling unauthenticated arbitrary file reads.
OpenAI Announced $1B in Defensive Tools for Water Utilities
OpenAI pledges $1 billion in subsidized Daybreak cyber models and training for water utilities, grid operators, and other critical-infrastructure defenders.
2