{"id":196084,"date":"2026-03-15T08:22:00","date_gmt":"2026-03-15T12:22:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/03\/15\/hackerone-report-points-to-widening-ai-security-gap-as-deployments-grow\/"},"modified":"2026-03-15T10:20:10","modified_gmt":"2026-03-15T14:20:10","slug":"hackerone-report-points-to-widening-ai-security-gap-as-deployments-grow","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/03\/15\/hackerone-report-points-to-widening-ai-security-gap-as-deployments-grow\/","title":{"rendered":"HackerOne report points to widening AI security gap as deployments grow"},"content":{"rendered":"

HackerOne report points to widening AI security gap as deployments grow<\/a><\/p>\n

https:\/\/www.cybersecurity-insiders.com\/hackerone-report-points-to-widening-ai-security-gap-as-deployments-grow\/<\/a><\/p>\n

Publish Date: 2026-03-15 08:22:00<\/a><\/p>\n

Source Domain: www.cybersecurity-insiders.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

Organizations are rapidly expanding their use of artificial intelligence, but many are not testing those systems at the same pace, according to new research from HackerOne. The report identifies what the company calls an AI security gap, describing a disconnect between AI adoption and formal security testing.
\nThe study finds that AI use has grown significantly over the past year. Ninety four percent of respondents report operating more AI or machine learning systems than they did a year ago. Despite that growth, testing coverage remains uneven. Only 66% of organizations say they formally test 61% or more of their AI or ML systems, creating a 28 point AI security gap.
\nOrganizations operating within that gap appear more likely to encounter security issues tied to AI. According to the survey, 89% of security leaders at organizations with limited testing coverage reported AI related attacks or vulnerabilities during the past year.
\nThe report also highlights the financial impact of inadequate testing. Security leaders working in environments where AI testing coverage is limited report 70% higher annual remediation costs compared with organizations that test nearly all of their AI systems.
\n\u201cAI systems are dynamic, evolving with every model update, integration, and data connection and the same is true of modern digital systems overall,\u201d said Kara Sprague, CEO of HackerOne. \u201cAs systems become more interconnected and adaptive, risk evolves in real time. Periodic testing assumed stability. Today\u2019s reality requires continuous testing so leaders can detect change, identify what\u2019s exploitable, and mitigate risk before it materializes.\u201d
\nThe findings are based on a survey of more than 300 security leaders across six countries and highlight structural trends shaping AI risk exposure:
\n\u2022 AI risk compounds as deployments scale: Organizations that expanded from a small AI footprint of two systems to a larger footprint of eight to 10 systems experienced 82% more attack types reported and 2.4 times higher attack costs. As AI systems integrate with APIs, enterprise applications and internal data sources, exposure can increase significantly when testing practices do not expand alongside deployment.
\n\u00a0\u2022 Testing coverage is not keeping pace: While 94% of organizations added AI or ML systems in the past year, only 66% say they formally test 61% or more of their systems. Across all respondents, 84% experienced at least one AI related attack or vulnerability in the past 12 months. Organizations testing 91% or more of their AI systems are 16% less likely to report an AI related incident than organizations with lower testing coverage.
\n\u2022 Shadow AI remains a material blind spot: Only 55% of organizations report that they fully track unsanctioned or \u201cshadow\u201d AI usage. When employees independently adopt AI tools in their workflows, organizations may lose visibility into how those systems interact with enterprise applications and data. This unmanaged use can expand the attack surface and introduce governance and compliance risks.
\n\u201cOrganizations keep adding AI systems without thinking about the blast radius,\u201d said Luke Stephens, security researcher. \u201cThese aren\u2019t sandboxed toys. They\u2019re hooked into real data, real APIs, real decision-making. When something goes wrong, it doesn\u2019t stay contained. The cost data in this report reflects what I\u2019ve been seeing in the wild: the longer you wait to test, the more expensive it gets to fix.\u201d
\nAs artificial intelligence systems move deeper into production environments, oversight is becoming a growing priority for leadership teams and regulators. Boards and executives are increasingly seeking evidence that AI systems are properly monitored and tested.
\nThe report concludes that addressing the AI security gap will require organizations to embed continuous security testing into how AI systems are developed, deployed and governed. As AI adoption continues to grow, security practices will need to evolve to ensure organizations maintain visibility into emerging risks.<\/p>\n

Join our LinkedIn group Information Security Community!<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

HackerOne report points to widening AI security gap as deployments grow https:\/\/www.cybersecurity-insiders.com\/hackerone-report-points-to-widening-ai-security-gap-as-deployments-grow\/ Publish Date: 2026-03-15…<\/p>\n","protected":false},"author":1,"featured_media":196085,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.cybersecurity-insiders.com\/wp-content\/uploads\/CSI-1-2.png","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,20,24,27],"class_list":["post-196084","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-artificial-intelligence","tag-cybersecurity","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/196084"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=196084"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/196084\/revisions"}],"predecessor-version":[{"id":196086,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/196084\/revisions\/196086"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/196085"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=196084"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=196084"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=196084"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}