Zscaler acquires SquareX

Zscaler acquires SquareX

|
Written by Vivek Ramachandran, Founder & CEO, SquareX. This article originally appeared here.Today, we’re thrilled to share a defining milestone in SquareX’s journey: Zscaler, the leader in Zero Trust has acquired SquareX. Joining Zscaler marks the next chapter in our mission to transform how enterprises secure the place where modern work ... Read More
Browser Wars, Continued: Why Everyone Is Building Their Own AI Browser

Browser Wars, Continued: Why Everyone Is Building Their Own AI Browser

Written by Vivek Ramachandran, SquareX Founder, for Forbes Technology Council. This article originally appeared here.Source: GettyIf you lived through the 1990s, you’ll remember the first of the “ browser wars,” where Netscape and Internet Explorer fiercely competed for market dominance. Then Google launched Chromium in 2008, and this battle effectively ended ... Read More
BSidesSF 2025 - Data Splicing Attacks: Breaking Enterprise... (Vivek Ramachandran, Audrey Adeline)

2025 Year of Browser Bugs Recap: A Year of Unmasking Critical Browser Vulnerabilities

At the beginning of this year, we launched the Year of Browser Bugs (YOBB) project, a commitment to research and share critical architectural vulnerabilities in the browser. Inspired by the iconic Months of Bugs tradition in the 2000s, YOBB was started with a similar purpose — to drive awareness and discussion around ... Read More
Comet’s MCP API Allows AI Browsers to Execute Local Commands

Comet’s MCP API Allows AI Browsers to Execute Local Commands

| | AI, api, Browser Security, comet, Cybersecurity
SquareX has discovered a critical security vulnerability in Comet, Perplexity’s AI browser, that fundamentally compromises user trust and device security. Our research reveals that Comet has implemented an MCP API that allows its embedded extensions to execute arbitrary local commands on host devices without explicit user permission, capabilities that traditional ... Read More
SquareX Browser Detection and Response: Closing the SWG and EDR Visibility Gap

SquareX at Security Field Day 14

Showcasing how SquareX Closes the SWG and EDR Visibility GapThe recent Security Field Day 14 provided SquareX with a valuable platform to demonstrate how Browser Detection and Response (BDR) addresses critical gaps in enterprise security. As part of Futurum Group’s Tech Field Day series, this invite-only technical conference brings together ... Read More
SquareX Wins Multiple Cybersecurity Awards in H2 2025

SquareX Wins Multiple Cybersecurity Awards in H2 2025

SquareX recognized by leading industry organizations for our innovative approach to browser securityThe second half of 2025 has been a milestone period for SquareX. As pioneers in the Browser Detection and Response (BDR) space, we’ve been recognized by leading industry organizations for our innovative approach to browser security. These awards validate ... Read More
SquareX Secures ChatGPT Atlas Browser, Comet and More

SquareX Secures ChatGPT Atlas Browser, Comet and More

Last week, OpenAI released their own AI Browser, ChatGPT Atlas. The past quarter has seen major players like OpenAI, Perplexity and Atlassian releasing or acquiring their own AI Browsers. Even consumer browsers have heavily jumped onto the AI Browser bandwagon, with Chrome releasing Gemini in Chrome.As AI-powered browsers gain traction, the ... Read More
AI Sidebar Spoofing: Malicious Extensions Impersonates AI Browser Interface

AI Sidebar Spoofing: Malicious Extensions Impersonates AI Browser Interface

A few weeks ago, we released a series of attacks that tricked Comet into exfiltrating data, downloading malicious files and providing unauthorized access to enterprise apps, all without the victim’s knowledge. The research highlights the lack of security awareness AI browsers have, and the importance of reimagining security to take ... Read More
AI Browser Vulnerabilities: OAuth Attack Leading to Unauthorized Access to Emails & Google Drive

3 Architectural Security Vulnerabilities of AI Browsers

When Perplexity released Comet in July, it brought to light what the future of browsers could look like. Since then, a multitude of users have adopted AI Browsers and companies like Open AI, The Browser Company (Dia) and Fellou AI have all released or announced the release of their own ... Read More
DEF CON 32 - Breaking Secure Web Gateways  for Fun and Profit -Vivek Ramachandran, Jeswin Mathai

Why SASE Vendors Are Finally Admitting the Need for Browser Security Solutions

In early September, Palo Alto Networks publicly acknowledged that Secure Web Gateways (SWGs) are architecturally unable to defend against Last Mile Reassembly attacks. SquareX first discovered and disclosed Last Mile Reassembly attacks at DEF CON 32 last year, warning the security community of 20+ attacks that allow attackers to bypass ... Read More
Loading...