Skip to main content
Jack LaFond
Security Researcher

Jack LaFond

I'm a security engineer + security researcher at cside.

Articles by Jack LaFond

The Blockchain Is Not Your Friend: Examining EtherHiding and using Blockchain for Attacks

In March/April of 2025 a ClickFix variant was going around that used the Binance blockchain with smart contracts to control malware payloads that would surface from a hacked WordPress plugin.

Sep 2, 2025

Deobfuscating Third-Party JavaScript Code | A Security Engineer's Guide

From a security perspective, a third-party script with obfuscated code is a massive red flag. This guide explores methods to deobfuscate JavaScript and how to spot common attacks.

Aug 28, 2025

Cosmic Ray Bit Flips and the Hidden Risk at Scale

When a 1 in a million rare occurrence, turns out not to be so rare. How our atmosphere changes zero to ones and how it can impact security.

Aug 8, 2025
Book a demo

Want to walk through this with an engineer?

Thirty minutes, on your own site. Not a slide deck.

Book a personalized demo to see:

How to achieve PCI DSS requirement 6.4.3 & 11.6.1 compliance in 1 day
Why third-party scripts are a security risk for you and your visitors
Monitoring privacy and consent leakage (GDPR, CCPA) across every third party
Stopping signup abuse, account sharing, and chargeback fraud with device intelligence
Detecting and controlling AI agents and bots hitting your site in real time

Rather just send a question?

Finding open slots…

Real humans only. We'd know.

Having trouble booking? Open scheduler in a new tab

What are you trying to solve?

Tell us in a line and we'll come back with something useful, not a generic pitch.

We usually help with:

Seeing which third-party scripts run on your site
PCI DSS 6.4.3 and 11.6.1 evidence
Bots, AI agents and account takeover

Prefer to just book a time? Pick a slot instead