HackerOne · June 2026

June was about volume: 132 valid reports across 83 distinct programs.

June jumped in volume.

I touched 83 distinct programs and ended with 132 valid reports between resolved, triaged and duplicate. Twelve critical and thirty-three high.

I passed through GitHub, Spotify, TikTok, HubSpot, Trip.com, Crypto.com, Acronis, 8x8 and Flickr, among others.

83 programs in a month says plenty on its own. It is not one person checking them one by one; it is a system covering ground.