The 2024 Browser Safety Report Uncovers How Each Internet Session Might be a Safety Minefield

With the browser changing into essentially the most prevalent workspace within the enterprise, it is usually turning into a preferred assault vector for cyber attackers. From account takeovers to malicious extensions to phishing assaults, the browser is a method for stealing delicate information and accessing organizational techniques.

Safety leaders who’re planning their security structure require information and insights into the browser menace panorama. Just lately, LayerX launched the “Annual Browser Safety Report 2024”, offering an in-depth evaluation of the evolving menace panorama for browser security.

This complete report highlights the important vulnerabilities and assault vectors that pose the best dangers to enterprise security. It permits decision-makers and stakeholders to benchmark the security challenges of their setting to allow them to make actionable choices. Beneath, we element key findings from the report and a summarized record of security suggestions. We urge you to learn the whole report, which is wealthy in particulars, examples and extra sections we didn’t embody on this article.

Key Findings from the Report

1. Hybrid Work Dangers – Unmanaged units and private browser profiles are main vectors for cyber threats, like information leakage and phishing. The chance is widespread – 62% of the workforce is utilizing unmanaged units to entry company information and 45% of all browsers inside company units use private profiles.
2. Browser Extension Threats – 33% of all extensions inside a corporation pose a excessive threat, with 1% of put in extensions identified to be malicious. The report highlights how misleading extensions are utilized by attackers to hijack consumer information and lead customers to phishing websites.
3. Shadow SaaS Dangers – The clandestine use of Shadow SaaS functions by workers creates important vulnerabilities, like blind spots and in id administration.
4. Identification Vulnerabilities – Shared accounts and Single Signal-On (SSO) practices result in elevated dangers of unauthorized entry. Incidents just like the 23andMe data breach spotlight the hazards of shared identities.
5. Gen-AI and LLM Vulnerabilities – 7.5% of workers threat information publicity by pasting or typing delicate data into Generative AI instruments like ChatGPT. There’s a important hole within the security neighborhood in understanding the dangers related to AI instruments in company environments.
6. AI-Powered Threats – AI can be utilized to boost assaults, from malware to phishing to browser extension exploitation to produce chain assaults. These threats leverage AI-driven personalization to make assaults extra convincing and tough to detect, or they use AI algorithms to enhance attacking capabilities.
7. Unpatched Vulnerabilities – Unpatched vulnerabilities in browsers pose a big threat. There are variations in patching occasions amongst browsers.

Suggestions for Safety Leaders

To fight these threats, the report’s analysts advocate a multifaceted strategy:

• Replace browsers repeatedly and push security patches promptly to mitigate dangers from outdated software program.
• Limit unauthorized extensions and repeatedly evaluate permissions to forestall information theft.
• Prepare workers to determine and report suspicious emails and web sites.
• Implement conditional entry controls and promote clear BYOD insurance policies to safe private units used for work.
• Implement MFA and educate workers on password hygiene to boost account security.
• Implement safe configurations and the whitelisting of extensions.
• Limit entry to delicate information primarily based on consumer roles.
• Use superior instruments to detect and analyze browser information for threats, making certain proactive menace mitigation.

Learn the Report

The Annual Browser Safety Report is a vital useful resource for security leaders in search of to know and mitigate browser-based dangers. By adopting the really useful methods, organizations can strengthen their protection towards the more and more subtle and threats focusing on browsers. For additional insights, greatest practices and predictions, learn the report right here.