PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Announcing the HackerOne 2022 Attack Resistance Report: A Security Survey—How to Close Your Organization's Attack Resistance Gap

hackerone.com | blog | #supply-chain | #attack-surface | #security-testing | #survey | #report | #hackerone | #attack-resistance
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's 2022 Attack Resistance Report finds an attack resistance gap driven by incomplete attack surface knowledge, testing that lags app updates, limited scanners, and missing expertise.
Published
Collected

Related coverage

blog · metabase.com
Metabase Community Data Stack Report 2025
Key findings from 330+ teams in 50+ countries: data teams stay small (1–3 people even at large firms), PostgreSQL tops both transactional and analytics use, and about half skip data warehouses.
blog · wiz.io
AI Is Everywhere—But Security Teams Are Still Catching Up
Wiz's AI security survey of 96 organizations: 87% already use AI services, 31% cite missing AI expertise as their top challenge, 13% run AI-SPM, and a quarter cannot identify their own AI services.
blog · metabase.com
The Metabase Community Data Stack Survey: by data teams, for data teams
Metabase's 2025 Community Data Stack Survey invited teams to share tool choices, adoption timing and pain points for a vendor-neutral benchmark of real-world data stacks; it is now closed.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
Back