HackerOne report: critical vuln fixes 61% faster, but backlog grows 131%
philvenables · x · 2026-10-13
HackerOne's 10th annual Security Research Report quantifies 'Exposure Debt': average resolution time for critical findings fell 61% in two years, yet open valid reports grew 131% from 2024 to 2026 as discovery outpaces remediation. Bounty payouts hit $89.1M (July 2025–June 2026). Meanwhile, 68% of researchers have shifted toward higher-complexity, higher-bounty bugs as AI handles routine work — researchers aren't being replaced, they're raising the bar.
More from Safety
- Adversarial AI raised specialists' harmful decision rate from 2% to 49% despite human oversight — EricTopol · 2026-10-13
- Agents must be lawful by design: safety should live in the inference engine — rseroter · 2026-10-13
- OpenAI Fires Three Safety Researchers Who Wrote Chain-of-Thought Monitorability Paper — Don't Worry About the Vase (Zvi) · 2026-10-13
- UK Home Secretary invokes Bentham's Panopticon in vision for AI surveillance — nitarshan · 2026-10-13
- 210-page paper argues a durable pause on frontier AI training is feasible — KatjaGrace · 2026-10-13
- A phishing email with all-true facts and passing SPF — and how Grok still caught it — pwlot · 2026-10-13