New Browser Security Report Reveals Emerging Threats for Enterprises
The latest Browser Security Report 2025 indicates that security leaders are finding that the majority of risks associated with identity, SaaS, and AI converge in one location: the user's browser. However, conventional controls such as DLP, EDR, and SSE function at a level that is still too low.
What is coming to light is more than just a blind spot. It constitutes a parallel threat surface: extensions that are not managed and function like supply chain implants, GenAI tools obtained via personal accounts, sensitive data being copied and pasted into prompt fields without any intermediary steps, and sessions that completely avoid SSO.
This article examines the main results of the report and what they indicate about the changing locus of control in enterprise security.
The emergence...