Palo Alto Networks Acknowledges SquareX Research on Limitations of SWGs Against Last Mile Reassembly Attacks

Palo Alto Networks has acknowledged SquareX’s research on the limitations of Secure Web Gateways (SWGs) against Last Mile Reassembly attacks. SquareX first discovered and disclosed Last Mile Reassembly attacks at DEF CON 32 last year, warning of more than 20 attacks that can bypass major SASE/SSE solutions and smuggle malware through the browser.

According to a Palo Alto Networks press release, the attacks are “encrypted, evasive attacks that assemble inside the browser and bypass traditional secure web gateways,” and the company notes that the browser is becoming the new operating system for the enterprise, making securing it essential.

The statement marks Palo Alto Networks as the first major incumbent SASE/SSE vendor to publicly admit the fundamental limitations of SWGs and to acknowledge the need for browser-native security solutions, a stance SquareX has advocated since its research began. The article also highlights that SquareX has continued to expand its browser-security work and has engaged with CISOs from large enterprises to promote awareness of these browser-native threats.