How The Browser Became The Main Cyber Battleground
The Hacker News, Tuesday, July 29th, 2025
Until recently, the cyber attacker methodology behind the biggest breaches of the last decade or so has been pretty consistent
- Compromise an endpoint via software exploit, or social engineering a user to run malware on their device;
- Find ways to move laterally inside the network and compromise privileged identities;
- Repeat as needed until you can execute your desired attack - usually stealing data from file shares, deploying ransomware, or both.
But attacks have fundamentally changed as networks have evolved. With the SaaS-ification of enterprise IT, core business systems aren't locally deployed and centrally managed in the way they used to be. Instead, they're logged into over the internet, and accessed via a web browser.