c/side enterprise now supports Okta SSO ✨
Any enterprise customer can simply follow the guide in our documentation to setup their environment.

Bytebit Attack: $1.5B stolen through malicious JavaScript The attackers injected malicious JavaScript into the website interface where Bybit’s employees normally approve transactions. This malicious code was hidden in such a way that everything looked normal...

We discovered that the $1.5 billion Bybit attack involved malicious JavaScript injected into the website interface where Bybit’s employees normally approve transactions—exactly the type of attack c/side is designed to catch.

Read our full analysis here:

cside.dev/blog/bytebit...

c/side is now SOC2 compliant We’re proud to announce our SOC2 type 2 audit has passed and we passed with the highest degree of approval.

We've received our SOC2 confirmation with the highest degree of approval.
cside.dev/blog/c-side-...

5) Time handling
Upon hovering over a specific script, it now shows the request timing info in the local time, UTC and the relative time passed since the request

4) Timeframe changes
The sample range set now reflects the script graph and the script table at once to get a better overview in a glance.

3) Script search bar
The search bar now searches across all scripts in real-time, not only those previously fetched, this to give a more complete and correct overview.

2) AI script justification
Our AI now drafts the justification for the scripts on your pages. Simply edit or confirm the AI output.

Our PCI DSS dashboard is now fully released to all enterprise customers.

Let's run through the update and all the new features 👀

1) Our customers now have a full overview and history of Content Security Policy (CSP) headers, flagging and blocking malicious changes.

10,000 WordPress Websites Found Delivering MacOS and Windows Malware We identified over 10,000 WordPress loading showing fake Google browser update leading to malware downloads.

We've identified +10k WordPress websites being used to deliver cross-platform malware.

The attackers likely used a vulnerability in a popular WordPress plugin which opens a fake Google update page, leading to the download of the malware.

cside.dev/blog/10-000-...

Based on real world examples

Podcast alert 🚨
Our own @simon.blue talked to SE Radio to discuss the dangers that 3rd party scripts bring, including the recent #Polyfill attack.

🎙️ Listen here: se-radio.net/2024/11/se-r...