82% of IT pros report a web-based security incident in past year BYOD, SaaS tools, and remote work policies all play a part in security resilience

Date:
Fri, 29 May 2026 13:05:00 +0000

Description:
Confidence is high, despite malware running rampant and businesses losing login credentials left and right.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter NordLayers Webbased Threat Report 2026 found a gap between confidence and reality: 73% of firms feel prepared, yet 82% suffered browserbased attacks Malware harvested 1.8M credentials and 68.8B cookies last year, with stolen logins enabling silent intrusions as SaaS reliance grows Researchers stress browsers are the
critical boundary, urging stronger DLP and controls to address uneven
coverage and escalating webthreat sophistication Most businesses believe they are well-prepared to face cyberattacks, but the number of successful breaches in the last year alone paints a different picture.

Earlier this week, NordLayer released a new report, called Why Browser Security Cant Wait: Web-based Threat Report 2026. In it, the company states that while 73% of organizations claim to be prepared for web-based attacks
and are confident in their solutions, 82% experienced some form of web-based attack. The paper is based on an analysis of 504 highest rated and most reviewed work applications, an analysis of data stolen from various infostealers, and a survey of 405 US cybersecurity and IT professionals. Latest Videos From You may like Cyber attackers have a new favorite, the browser 'Cybercriminals are industrializing deception': new report reveals
how major global cybercrime syndicates have infiltrated trusted domains with millions now at risk - here's what you need to know New NordLayer browser looks to help boost SMB security like never before Hackers don't hack anymore NordLayer stresses that coverage is modest and uneven, with data loss prevention tools (DLP) leading at just 53%, followed by other security controls. Nearly all IT professionals reported that their organizations are concerned about web-based threats (98%), and most expect escalation. In fact, 81% expect greater sophistication and 73% believe there will be more
incidents in the coming years.

Theres a clear gap between recognizing the threat and knowing how to address it, says Buinovskis. Concern is high, but awareness of which controls
actually solve browser-specific risks is low. Much of the initial confidence most likely comes from having general security controls in place, yet they rarely adequately cover risks in the browser .

The researchers also stressed that 100% of the tested applications were browser-accessible, and almost four in five (78.8%) were browser-only. At the same time, malware was able to harvest 1.8 million credentials and 68.8 billion cookies last year.

Hackers dont hack anymore, they just log in, says Buinovskis. Stolen cookies and credentials grant immediate access without raising alarm bells a login looks legitimate. Its low risk, high reward, and as reliance on web-based
SaaS grows, so does the value of stolen data. Attackers will keep exploiting this until organizations secure the browser as a critical boundary. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/82-percent-of-it-pros-report-a-web-base d-security-incident-in-past-year-byod-saas-tools-and-remote-work-policies-all- play-a-part-in-security-resilience


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)