Cybersecurity Tools Fail to Detect 20% of Browser-Based Phishing Attacks

A report by Menlo Security reveals that cybersecurity software fails to detect 20% of phishing attacks targeting enterprise browser users. The 2026 Browser Threat Report indicates that attackers exploit the browser session layer, which many traditional security tools do not monitor effectively. In Q1 2026, Menlo Security blocked nearly 115,842 evasive phishing campaigns designed to bypass legacy detection systems. The report highlights the ClickFix attack method, where users are tricked into executing commands that appear legitimate. This gap in security allows threat actors to gain access to enterprise environments through browser sessions, affecting various enterprise activities including email and SaaS applications. Organizations are urged to enhance their security measures at the browser session layer to mitigate these risks. The report emphasizes that existing tools are not broken but rather unfit for the current threat landscape.

Key Points: • 20% of phishing attacks targeting enterprise browsers go undetected by security tools. • Menlo Security blocked over 115,000 evasive phishing campaigns in Q1 2026. • Organizations must secure the browser session layer to protect against modern threats.