Skip to main content
Jack LaFond
Security Researcher

Jack LaFond

I'm a security engineer + security researcher at cside.

Articles by Jack LaFond

The Blockchain Is Not Your Friend: Examining EtherHiding and using Blockchain for Attacks

In March/April of 2025 a ClickFix variant was going around that used the Binance blockchain with smart contracts to control malware payloads that would surface from a hacked WordPress plugin.

Sep 2, 2025

How to Deobfuscate JavaScript: Free Tools + Methods (2026)

Free JavaScript deobfuscation tools compared (JSBeautify, deobfuscate.io, de4js) plus step-by-step methods for malicious script analysis.

Aug 28, 2025

Cosmic Ray Bit Flips and the Hidden Risk at Scale

When a 1 in a million rare occurrence, turns out not to be so rare. How our atmosphere changes zero to ones and how it can impact security.

Aug 8, 2025
Book a demo

Want to walk through this with an engineer?

Thirty minutes, on your own site. Not a slide deck.

Book a personalized demo to see:

How to achieve PCI DSS requirement 6.4.3 & 11.6.1 compliance in 1 day
Why third-party scripts are a security risk for you and your visitors
Monitoring privacy and consent leakage (GDPR, CCPA) across every third party
Stopping signup abuse, account sharing, and chargeback fraud with device intelligence
Detecting and controlling AI agents and bots hitting your site in real time

Rather just send a question?

Use this same email when booking with Google. Google may ask you to enter it again.

We use your email to match your booking to your visit and measure how people find us. It is not a newsletter signup.

Having trouble booking? Open scheduler in a new tab

What are you trying to solve?

Tell us in a line and we'll come back with something useful, not a generic pitch.

We usually help with:

Seeing which third-party scripts run on your site
PCI DSS 6.4.3 and 11.6.1 evidence
Bots, AI agents and account takeover

Prefer to just book a time? Pick a slot instead