Browser Security Survey: 87% of SaaS Adopters Exposed to Browser-borne Attacks

The browser serves as the primary interface involving the on-premises setting, the cloud, and the web in the modern day enterprise. Hence, the browser is also uncovered to various varieties of cyber threats and operational pitfalls.

In mild of this sizeable challenge, how are CISOs responding?

LayerX, Browser Security platform supplier, has polled more than 150 CISOs throughout numerous verticals and geolocations. They asked them about their security practices for SaaS accessibility, BYOD, phishing, browser facts decline and browser security. The effects of this in depth poll can be observed in the report “2023 Browser Security Survey”. In this article, we bring a taste of the report. You can read through all the results and assessment below.

Most important Highlights

• Organizations in the cloud are uncovered to web-borne attacks. 87% of all-SaaS adopters and 79% of CISOs in a hybrid ecosystem experienced a web-borne security threat in the past 12 months.

• Account takeover is a best concern. 48% checklist credential phishing as the riskiest browser risk. Followed by destructive browser extensions (37%), malware down load (9%), and browser vulnerabilities (6%).

• Unsanctioned applications and shadow identities are perceived as unaddressed security gaps. 95% of corporations have a protection amount of 50% or considerably less for unsanctioned apps.

• Most businesses hire at minimum two security actions to fight phishing attacks. 79% employ network security resources, like firewalls and SWGs.

• Both of those all-SaaS and hybrid organizations use network alternatives to block phishing, but realize this is not an economical approach. 80% have a protection amount of 50% or much less.

Instance getting from the report

Go through the comprehensive report and its recommendations right here.

What These Findings Imply

The interesting effects of the study have led LayerX analysts to conclude that though SaaS adoption is (unsurprisingly) on the increase, CISOs are nonetheless battling to solve the security debt created by the transition to the cloud. Threats like phishing, account takeover and unsanctioned apps are major worries for CISOs, who are searching for methods that can mitigate them.

Nevertheless, present network answers aren’t equipped to offer a protected means. This is due to the fact options utilised by on-prem companies these as system belief, CASB or network proxies, are losing performance after the group transitions to the cloud. As a end result, in most businesses they are not implemented across all environments. In addition, well-liked solutions like MFA also usually are not in a position to supply on their promise.

So what can CISOs do? Considering the fact that the trouble stems from the browser, it necessitates a browser security resolution.

Uncovered this article appealing? Stick to us on Twitter  and LinkedIn to go through extra exceptional content we write-up.

Some parts of this article are sourced from:
thehackernews.com