FailSafe insights
Incident reporting, security research, practical guides and product updates.
Recent articles
Hacks & Incidents
A critical privilege escalation vulnerability in the OpenClaw gateway is being actively exploited in the wild, allowing attackers to hijack autonomous AI agents and gain full admin
Apr 3, 2026 · 4 min read
Hacks & Incidents
Threat actors compromised an axios maintainer account to publish malicious versions to npm, bypassing CI/CD to deploy a highly sophisticated, cross-platform RAT dropper.
Mar 31, 2026 · 4 min read
Research
Learn how fintech companies in Singapore should approach penetration testing to satisfy MAS's strict Technology Risk Management (TRM) guidelines for annual license renewals.
Mar 31, 2026 · 3 min read
Features
Build a penetration-testing request for proposal around scope, methods, evidence, safety, access, and delivery rather than incompatible headline prices.
Oct 29, 2026 · 3 min read
Hacks & Incidents
A major supply chain attack compromised the popular LiteLLM Python package on PyPI, actively harvesting AWS, GitHub, and crypto credentials while attempting lateral movement across
Mar 25, 2026 · 3 min read
Case Studies
FailSafe has partnered with Synthesys to provide comprehensive, institutional-grade security for the launch of the TPLUS tokenized private credit fund.
Mar 24, 2026 · 2 min read
Features
Evaluate local MCP package identity, execution privileges, file access, updates, and removal with a bounded workstation assessment.
Oct 29, 2026 · 3 min read
Hacks & Incidents
An attacker exploited a critical minting vulnerability in the Resolv Protocol, creating 80 million uncollateralized USR tokens via a $100K deposit and triggering a 97.5% depeg.
Mar 22, 2026 · 3 min read
Hacks & Incidents
A critical zero-day vulnerability in Langflow (CVE-2026-33017) isn't just leaking API keys. Attackers are deploying reverse shells, mining cryptocurrency, and actively poisoning RA
Mar 21, 2026 · 3 min read
Features
A resource-consumption assessment should connect expensive API work to quotas, budgets, and safe stopping conditions. The objective is to evaluate how the application bounds work,
Oct 29, 2026 · 3 min read
Features
Compare FailSafe and Pentera around active testing, reproducible findings, code remediation, sovereign hosting and enterprise-owned cyber-model inference.
Oct 29, 2026 · 3 min read
Features
Compare FailSafe and Terra Security on agentic testing, human oversight, evidence review and deployment architecture.
Oct 29, 2026 · 3 min read
Features
An SSRF assessment should identify which user-influenced actions cause a server to make an outbound request, then evaluate the intended destination policy with controlled infrastru
Oct 29, 2026 · 3 min read
Product
FailSafe’s code-agnostic agentic security testing platform, SWARM, achieves 69.2% vulnerability detection recall on the EVMbench smart contract security benchmark, outperforming si
Mar 18, 2026 · 7 min read
Features
A presigned URL security review should examine both the storage permission and the application decision to issue the link. A correctly signed download can still expose a file if an
Oct 29, 2026 · 3 min read
Questions & answers
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.