One in Five Browser-Based Phishing Attacks Evade Detection, Menlo Security Report Finds (infosecurity-magazine.com)

• 20% of browser-based phishing attacks evade detection by traditional tools.
• Attackers exploit the browser session layer, a blind spot for many security products.
• Social engineering techniques like ClickFix bypass legacy security controls.

"Menlo Security's 2026 Browser Threat Report reveals that one in five phishing attacks targeting enterprise browser users go undetected by traditional security tools. Based on telemetry from millions of active browser sessions, the report highlights that attackers exploit the browser session layer, which many legacy security products are not designed to protect. The study urges organizations to focus on securing the browser session layer to counter evolving threats."