Bloomberg · October 23, 2026
Wui Foo on AI hacking and cybersecurity
FailSafe president Wui Foo discusses protecting websites and services on Bloomberg: The Asia Trade.
FailSafe insights
Security research and insights
Incident reporting, security research, practical guides and product updates.
In the news
FailSafe in the news
Recent articles
Research
From NEAR AttackBench Research to an MCP Assessment
Use FailSafe and NEAR AttackBench research to plan MCP runtime tests, define evidence and distinguish benchmark results from deployment assurance.
Nov 5, 2026 · 4 min read
Features
LLM Penetration Testing: A Scope and Evidence Worksheet
Define an LLM assessment with a concrete inventory, trust boundaries, synthetic cases, evidence, exclusions and remediation retest.
Nov 5, 2026 · 4 min read
Features
A Synthetic Pentest Finding: Evidence, Fix and Retest
Follow a fictional authorization finding from approved scope through sanitized evidence, a reviewed fix and a bounded retest outcome.
Nov 5, 2026 · 4 min read
Case Studies
Regtank Partners with FailSafe to Secure Against Agentic Attacks
Regtank engaged FailSafe to run an AI-assisted penetration test of its KYC, KYB and AML compliance platform, assessing how it holds up against automated, agent-driven attacks.
Nov 4, 2026 · 5 min read
Research
A sandbox, a target network and sovereign inference: three boundaries to review
Why an isolated agent runtime, target-side egress restrictions and private model inference solve different containment problems in an agentic pentest.
Nov 2, 2026 · 4 min read
Features
Before an agentic pentest touches production: a review for system owners
A practical FailSafe checklist for authorizing production security testing, choosing proof methods, setting stop conditions and reviewing assessment artifacts.
Nov 2, 2026 · 4 min read
Product
When an agent proposes an unsafe action: how SWARM constrains execution
How FailSafe SWARM combines an execution gate, Safe and Cyber modes, minimal proof and ephemeral agent runtimes for authorized pentesting.
Nov 2, 2026 · 4 min read
Features
Who can turn off your agent monitor?
An enterprise review of monitoring configuration integrity, change authority, independent telemetry and safe recovery for AI-agent deployments.
Nov 2, 2026 · 3 min read
Research
Your agent monitor raised an alert. Did the workflow actually stop?
A practical evaluation design for agent monitoring: measure detection, authority reduction and the actions completed before containment.
Nov 2, 2026 · 3 min read
Research
Portable agent skills need a security review that travels with them
Agent Skills standardization raises a practical assurance problem: review instructions, scripts, permissions and runtime differences before enterprise reuse.
Nov 2, 2026 · 3 min read
Hacks & Incidents
ARTEX in real intrusions: test the time between access and containment
Google’s ARTEX reporting changes the defensive question: can your team contain an authorized test before a compromised identity reaches a critical workflow?
Nov 2, 2026 · 3 min read
Features
Autonomous RemOps needs two acceptance checks: service health and attack-path closure
Qualys TruRisk Eliminate highlights remediation automation. Define complementary evidence that the changed service works and the assessed attack path is closed.
Nov 2, 2026 · 3 min read
Features
Before an AI agent can approve a payment, test what the approval actually means
A banking and fintech assessment plan for transaction intent, delegated authority, amount limits and safe payment-workflow testing.
Nov 2, 2026 · 3 min read
Features
What should a board see when the vulnerability count keeps rising?
A practical security reporting model for verified attack paths, remediation coverage, unresolved risk and evidence quality.
Nov 2, 2026 · 3 min read
Hacks & Incidents
CERT-In’s agent advisory: make evaluation boundaries enforceable
A defensive response to CERT-In CIAD-2026-0049, covering authorized evaluation environments, exposed identities and remediation recurrence.
Nov 2, 2026 · 3 min read
Questions & answers
Frequently asked questions
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.