We are in town for the PCI SSC 2025 North America Community Meeting, September 16th to 18th.
You can find us at:
- Forth Worth Convention Center
- Booth 31
Book a meeting ahead of time or just swing on by!
Blog 
Blog
cside at PCI SSC 2025 North America Community Meeting
We are in town for the PCI SSC 2025 North America Community Meeting, September 16th to 18th.
Jul 24, 2025 • 0 min read
Simon Wijckmans Founder & CEO
Founder & CEO Simon Wijckmans
Founder and CEO of cside. Building better security against client-side executed attacks, and making solutions more accessible to smaller businesses. Web security is not an enterprise only problem.
Table of Contents
Monitor en Beveilig Je Third-Party Scripts
Gain full visibility and control over every script delivered to your users to enhance site security and performance.Start gratis, of probeer Business met een proefperiode van 14 dagen.
Related Articles
How Advanced Location Data Prevents Account Takeover and Detects Unsafe AI-Agent Token Reuse
How advanced location data helps security teams detect impossible travel, stolen-session reuse, and unsafe AI-agent activity before account takeover turns into fraud or data loss.
How Compromised Third-Party Scripts Can Prompt-Inject AI Agents
Third-party scripts already adapt website behavior by browser characteristics. That same flexibility can be abused to detect AI agents and inject misleading instructions or altered content.
Best methods to prevent account takeover fraud (FinTech)
FinTech accounts are targeted daily by attackers. See the best practices, fingerprint signals, and prevention tools FinTech teams use to stop ATO.
Best practices to prevent account takeover fraud (eCommerce)
eCommerce accounts are targeted daily by attackers. See the best practices, fingerprint signals, and prevention tools eCom companies use to stop ATO.
How to Prevent Account Takeover Fraud | 4 Step Guide for Businesses
MFA helps, but it does not stop account takeover on its own. This guide covers how businesses can prevent ATO early with fingerprinting signals.
Meet cside at RSAC 2026
Meet the cside time at RSAC 2026 in San Francisco. Stop by our booth S-0238 on March 24-26 or grab time with us off the floor.
DarkSword: pure JavaScript exploit chain weaponizes legitimate websites
DarkSword is a full-chain iOS exploit delivered via watering-hole compromises of legitimate websites. It runs entirely in JavaScript, evades binary mitigations, and drops JavaScript-based backdoors that exfiltrate sensitive data.
OpenClaw Scanner for Third-Party Scripts
A free, open-source scanner that inventories third-party scripts, detects fingerprinting, audits security headers and cookies, and flags PCI DSS exposure on payment pages. Run a quick 30-second audit to reveal what code executes in your users' browsers.
AppsFlyer Web SDK supply-chain compromise - polymorphic crypto stealer
A registrar-level DNS hijack of appsflyer.com served a polymorphic crypto-stealing payload through the AppsFlyer Web SDK, affecting thousands of sites and some Node.js server environments. This post summarizes telemetry, forensic indicators, IOCs, detection guidance, and remediation steps.
"Microsoft Clairty" Isn't Microsoft Clarity: Deobfuscating a Typosquatted Ad Fraud Script
Cside observed a new malicious client-side injection originating from a malicious browser extension impersonating Microsoft Clarity and overwriting referral tokens to redirect referral revenue to a malicious actor.