The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen

The Browser Defense Playbook argues that the browser has become the new centre of work and risk, driven by the rise of cloud-based apps and remote working. It notes that about 85% of daily work takes place in the browser, a shift that organisations must address with stronger browser security.

According to Unit 42’s 2025 Global Incident Response Report, nearly half of the incidents investigated involved malicious activity launched or facilitated through employees’ browsers, with tactics such as phishing, abuse of URL redirects and malware downloads listed as common methods.

The piece also highlights that attackers can bypass some controls via browser-centric tricks, including session hijacking and cross-site scripting, and stresses that “don’t click” no longer suffices because malicious assets can load without user interaction. It promotes a zero-trust approach to the browser—enforcing authentication, granular access, vetted extensions, continuous monitoring and risk-based controls—alongside tools like enterprise-grade secure browsers and real-time traffic inspection. Published: 2 December 2025.