FailSafe insights
Incident reporting, security research, practical guides and product updates.
Recent articles
Hacks & Incidents
What the vLLM maintainer advisory establishes about request-controlled processor code, conditional exposure and post-fix inference security evidence.
Nov 2, 2026 · 3 min read
Hacks & Incidents
Ahold Delhaize’s October cyber incident disrupted digital services while stores stayed open. Security lessons for retail dependencies and recovery controls.
Oct 30, 2026 · 3 min read
Hacks & Incidents
Andromeda’s October statement distinguishes exposed credentials from unobserved model-data access. A practical review of AI infrastructure privileges.
Oct 30, 2026 · 3 min read
Hacks & Incidents
Mandiant’s October disclosure describes short-lived AOMEI update tampering earlier in 2026. Lessons for artifact trust and continuous security evidence.
Oct 30, 2026 · 3 min read
Hacks & Incidents
Arista confirms active exploitation of an authenticated VeloCloud Orchestrator flaw. Fixed releases and lessons for management-plane authorization testing.
Oct 30, 2026 · 3 min read
Hacks & Incidents
Avalonia’s October CMS disclosure illustrates client-bundle secret exposure and the value of tested boundaries between content, customer and package systems.
Oct 30, 2026 · 3 min read
Hacks & Incidents
BeyondTrust’s October disclosure of CVE-2026-102764 describes earlier zero-day exploitation. A remote-support security and validation guide.
Oct 30, 2026 · 2 min read
Hacks & Incidents
Binance incident analysis: reported outflows, frozen assets and unresolved loss figures, plus security lessons for privileged workflows and containment.
Oct 30, 2026 · 4 min read
Hacks & Incidents
Capcom’s October 2026 disclosure separates exposed account metadata, additional profile fields and unauthorized password changes. Lessons for identity testing.
Oct 30, 2026 · 2 min read
Hacks & Incidents
Huntress’s ConnectWise investigation highlights app-only access, added credentials and the limits of user password resets in Microsoft 365 recovery.
Oct 30, 2026 · 3 min read
Hacks & Incidents
The University of Copenhagen’s October breach highlights sensitive data in test systems and the need to assess encryption keys and access together.
Oct 30, 2026 · 2 min read
Hacks & Incidents
DTU’s October disclosure describes unauthorized access to its identity system. Lessons for privilege boundaries, historical records and security evidence.
Oct 30, 2026 · 2 min read
Hacks & Incidents
Genesys’s October update distinguishes affected internal LMS and CRM systems from its customer platforms. Security lessons for enterprise SaaS boundaries.
Oct 30, 2026 · 3 min read
Hacks & Incidents
Ledger’s October explanation distinguishes tampered reseller devices from compromise of its chip or servers. Lessons for hardware distribution and secure enrollment.
Oct 30, 2026 · 2 min read
Hacks & Incidents
NEAR Intents disclosed a $3.8M exploit on 1 October and later reported returned funds. Lessons for integration invariants, safe suspension and retesting.
Oct 30, 2026 · 3 min read
Questions & answers
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.