#SquareX
In this episode, Phillip Wylie engages with CISO David Malicoat and SquareX founder Vivek Ramachandran to discuss the evolving role of a CISO, the challenges faced in cybersecurity, particularly in direct marketing, and browser-based vulnerabilities.

youtu.be/OtU1v4jifBI
SquareX CISO Series: David Malicoat & Vivek Ramachadarin
YouTube video by Phillip Wylie
youtu.be
December 25, 2024 at 2:03 AM
SquareX discloses a new attack technique that shows how malicious extensions can be used to completely hijack the browser, and eventually, the whole device.

Read: hackread.com/squarex-brow...

#CyberSecurity #Vulnerability
SquareX Unveils "Browser Syncjacking" Attack Granting Full Browser and Device Control
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
hackread.com
January 31, 2025 at 11:03 AM
SquareX Researchers Expose #OAuth Attack on Chrome Extensions Days Before Major Breach

Read: hackread.com/squarex-rese...

#CyberSecurity #Phishing #Chrome #CyberAttack
SquareX Researchers Expose OAuth Attack on Chrome Extensions Days Before Major Breach
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
hackread.com
January 2, 2025 at 7:03 AM
SquareX Reveals That Employees Are No Longer The Weakest Link, Browser AI Agents Are #cybersecurity
SquareX Reveals That Employees Are No Longer The Weakest Link, Browser AI Agents Are
hackernoon.com
June 30, 2025 at 8:28 PM
Be Fearless Online: Open emails without being tracked or hacked with SquareX podcasters.spotify.c...
Be Fearless Online: Open emails without being tracked or hacked with SquareX by Phillip Wylie Show
About The Guest:Jeswin Mathai is the Chief Architect at SquareX. He leads the team responsible for designing and implementing the Infrastructure. Prior to joining SquareX, He was working as the chief architect at INE. He has published his work at DEFCON China, RootCon, Blackhat Arsenal, and Demo Labs (DEFCON). He has also been a co-trainer in-classroom training conducted at Black Hat Asia, HITB, RootCon, and OWASP NZ Day. He has a Bachelor's degree from IIIT Bhubaneswar. He was the team lead at InfoSec Society IIIT Bhubaneswar in association with CDAC and ISEA, which performed security auditing of government portals and conducted awareness workshops for government institutions. His area of interest includes Cloud Security, Container Security, and Web Application Security. Summary:Jeswin Mathai joins Phillip Wylie in this episode of the "Stay Fearless Online" series to discuss email safety and how SquareX can protect users from being tracked or hacked. They highlight the challenges individuals face in staying safe online, especially those who are not tech-savvy. Jeswin explains that SquareX's browser extension is designed to provide a better way to protect users by sitting on the browser and ensuring secure browsing. They demonstrate how email tracking works and how SquareX's Enhanced Privacy Mode can prevent tracking by blocking third-party images. The extension also offers a secure disposable file viewing environment for opening attachments safely. Jeswin emphasizes the importance of email security as an entry point for attackers and how SquareX aims to provide a user-friendly solution. Key Takeaways: SquareX's browser extension sits on the browser to provide better security for users. Email tracking can reveal information about the user's location, device, and IP address. SquareX's Enhanced Privacy Mode blocks third-party images to prevent tracking. The extension offers a secure disposable file viewing environment for opening attachments safely. Email security is crucial as attackers often target individuals through email. Quotes: "With SquareX, the idea is not to intrude in users' workflow, rather ensuring that we provide them a way with which they can do everything securely." - Jeswin Mathai "The moment you open a link, it will go ahead and reveal information about from where you are opening the email, the IP address information, similarly what device you're using. Now all of this information can be used to profile the user." - Jeswin Mathai Socials and Resources: Get your free Chrome plugin: http://sqrx.io/pw_x https://www.linkedin.com/company/getsquarex/ https://twitter.com/getsquarex https://www.instagram.com/getsquarex/
podcasters.spotify.com
February 2, 2025 at 9:22 PM
By me @forbes.com: Now any Chrome browser extension can attack you and ultimately take over your device. Welcome to the world of browser syncjacking. #kudos SquareX

#infosec

www.forbes.com/sites/daveyw...
Millions Of Google Chrome Users Warned As Syncjacking Hack Gets Real
Hackers can now hijack any browser extension, millions of Chrome users have been warned. Here’s what you need to know about syncjacking attacks.
www.forbes.com
January 31, 2025 at 2:29 PM
The Endpoint Has Moved to the Browser — SquareX 🌐

At Security Field Day, SquareX showed how browser-based work leaves legacy SWGs and EDRs blind to client-side threats.

#XFD14 #BrowserSecurity #BrowserDetection #CyberSecurity #EndpointSecurity #DataLossPrevention
October 29, 2025 at 12:39 PM
This whole thing is dumb because it seems like SquareX is using the exact same “hijack” of WebAuthN registration that some legitimate browser extensions use like 1P then turning around and saying “ah ha but we were a bad extension not a good one!”

Uh, sure.
August 28, 2025 at 2:03 PM
Be Fearless Online: SquareX Introduces Disposable Emails to Combat Spam and Phishing Attacks podcasters.spotify.c...
Be Fearless Online: SquareX Introduces Disposable Emails to Combat Spam and Phishing Attacks by Phillip Wylie Show
About The Guest:Dakshitaa Babu is a Software Engineer at SquareX, where she is engaged in data engineering and analytics. She is also the pen behind the engineering blogs written on SquareX's infrastructure and security research. After completing her Bachelor's degree at the National University of Singapore, Dakshitaa joined SquareX, marking her foray into the cybersecurity industry. While new to the field, her enthusiasm for discovering and understanding new concepts has quickly established her as a committed contributor to the evolving sector. Her interests are in Browser Security and consumer education. Summary:Dakshitaa Babu discusses the importance of disposable emails in the cybersecurity space. She highlights that emails are a primary mode of communication and are therefore at great risk of threats. More than a quarter of all threats that occur on a daily basis happen through email. Dakshitaa explains that the growing importance of disposable emails is due to the fact that email is the gateway into our personal and professional lives. We often have to use our email addresses to sign up for services or receive important information. However, more than 50% of the emails we receive are spam, which can be a waste of time and affect productivity. Dakshitaa also mentions that legitimate sources sometimes sell our email addresses to spammers. She shares a fun tip of adding a suffix to our email addresses to track who may have leaked our email address. Dakshitaa emphasizes the increasing threat of phishing emails, which are becoming more targeted and difficult to detect. She mentions that phishing emails often contain malicious files or links, and even unsubscribe links within emails can be malicious. Dakshitaa explains that Squarex promotes safe email practices by providing an enhanced privacy mode and opening links and files in a disposable environment. She also mentions that Squarex is working on integrating with social media accounts to make clicking on links safer. Dakshitaa concludes by highlighting the importance of using disposable emails to reduce exposure to threats and maintain privacy online. Key Takeaways: Disposable emails are important in reducing the risk of threats that come through email. More than 50% of the emails we receive are spam, which can waste time and affect productivity. Phishing emails are becoming more targeted and difficult to detect. SquareX provides enhanced privacy mode and opens links and files in a disposable environment. Using disposable emails can help reduce exposure to threats and maintain privacy online. Quotes: "Emails are like a primary mode of communication, and that also puts it at great risk of threats." -Dakshitaa Babu "More than 50% of the emails that come in our inbox are spam." -Dakshitaa Babu "Phishing is getting worse, and these days you can't even tell if it's legitimate or not." -Dakshitaa Babu "Emails have become really dangerous. It's almost like the floor is lava." -Dakshitaa Babu "Disposable emails are a great way to exercise privacy online." -Dakshitaa Babu Socials and Resources:Get your free Chrome plugin: ⁠⁠http://sqrx.io/pw_x⁠⁠⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠⁠⁠https://twitter.com/getsquarex⁠⁠⁠⁠https://www.instagram.com/getsquarex/
podcasters.spotify.com
February 19, 2025 at 8:44 PM
SquareX warns of browser-native ransomware bypassing traditional security. This new threat targets user identities and cloud data, leveraging AI for automated attacks. It requires no file download, making detection difficult. SquareX urges enterprises to update their browser security strategies.
March 30, 2025 at 4:28 AM
Be Fearless Online: Open emails without being tracked or hacked with SquareX podcasters.spotify.c...
Be Fearless Online: Open emails without being tracked or hacked with SquareX by Phillip Wylie Show
About The Guest:Jeswin Mathai is the Chief Architect at SquareX. He leads the team responsible for designing and implementing the Infrastructure. Prior to joining SquareX, He was working as the chief architect at INE. He has published his work at DEFCON China, RootCon, Blackhat Arsenal, and Demo Labs (DEFCON). He has also been a co-trainer in-classroom training conducted at Black Hat Asia, HITB, RootCon, and OWASP NZ Day. He has a Bachelor's degree from IIIT Bhubaneswar. He was the team lead at InfoSec Society IIIT Bhubaneswar in association with CDAC and ISEA, which performed security auditing of government portals and conducted awareness workshops for government institutions. His area of interest includes Cloud Security, Container Security, and Web Application Security. Summary:Jeswin Mathai joins Phillip Wylie in this episode of the "Stay Fearless Online" series to discuss email safety and how SquareX can protect users from being tracked or hacked. They highlight the challenges individuals face in staying safe online, especially those who are not tech-savvy. Jeswin explains that SquareX's browser extension is designed to provide a better way to protect users by sitting on the browser and ensuring secure browsing. They demonstrate how email tracking works and how SquareX's Enhanced Privacy Mode can prevent tracking by blocking third-party images. The extension also offers a secure disposable file viewing environment for opening attachments safely. Jeswin emphasizes the importance of email security as an entry point for attackers and how SquareX aims to provide a user-friendly solution. Key Takeaways: SquareX's browser extension sits on the browser to provide better security for users. Email tracking can reveal information about the user's location, device, and IP address. SquareX's Enhanced Privacy Mode blocks third-party images to prevent tracking. The extension offers a secure disposable file viewing environment for opening attachments safely. Email security is crucial as attackers often target individuals through email. Quotes: "With SquareX, the idea is not to intrude in users' workflow, rather ensuring that we provide them a way with which they can do everything securely." - Jeswin Mathai "The moment you open a link, it will go ahead and reveal information about from where you are opening the email, the IP address information, similarly what device you're using. Now all of this information can be used to profile the user." - Jeswin Mathai Socials and Resources: Get your free Chrome plugin: http://sqrx.io/pw_x https://www.linkedin.com/company/getsquarex/ https://twitter.com/getsquarex https://www.instagram.com/getsquarex/
podcasters.spotify.com
April 27, 2025 at 6:36 PM
Hacker, Researcher, Educator, Entrepreneur, a Glimpse into The World of Vivek Ramachandran podcasters.spotify.c...
Hacker, Researcher, Educator, Entrepreneur, a Glimpse into The World of Vivek Ramachandran by Phillip Wylie Show
In this episode, Vivek Ramachandran joined the show. Vivek is the founder of Pentester Academy and SecurityTube. Vivek shared how he got interested in computers at an early age and developed a passion for hacking and cybersecurity. Since selling Pentester Academy to INE, he has started a hacker superhero, comic book, and his most recent venture a startup called SquareX. SquareX protects users with a secure browser solution that leverages a cloud-based sandbox. Vivek shares about his hacker-focused comic book titled Hackers: Superheroes of the Digital Age, which educates readers that hacking can be used for good. He shares how his son inspired him to create the comic book. Vivek's Bio: Vivek Ramachandran, a veteran in the cybersecurity industry with over 20 years of experience in building security products and finding vulnerabilities in security systems. His entrepreneurial experience spans over a decade, during which he has built wireless monitoring solutions, pentesting gadgets, and cloud-powered lab environments. Before SquareX, he founded Pentester Academy, a cloud-based cybersecurity training startup that was successfully acquired. Vivek also discovered the infamous Caffe Latte Attack and has authored multiple books and research papers on offensive cybersecurity techniques. He has spoken at top conferences like DEFCON and BlackHat over the years. Vivek's social media: https://www.linkedin.com/in/vivekramachandran/ https://twitter.com/vivekramac SquareX website and social media: https://www.sqrx.com/ https://www.linkedin.com/company/squarexonline/ https://twitter.com/getsquarex VRN Comics: https://www.vrncomics.com/ Connect with Phillip on social media, YouTube and visit his website: https://twitter.com/PhillipWylie https://www.linkedin.com/in/phillipwylie https://www.instagram.com/phillipwylie/ https://www.youtube.com/@phillipwylie https://www.thehackermaker.com/
podcasters.spotify.com
March 1, 2025 at 7:33 PM