Push Security Introduces Browser-Native Security to Combat Modern Cyber Attacks

Push Security has launched browser-native security capabilities as an alternative to traditional secure web gateways (SWGs) and cloud access security brokers (CASBs). This new approach addresses the limitations of proxy-based security, which fails to detect approximately 60% of malicious web pages due to structural flaws. The CEO, Adam Bateman, emphasized that modern attacks, such as adversary-in-the-middle (AitM) phishing and session hijacking, occur within the browser session after the network proxy has allowed the traffic. The new capabilities include URL blocking, phishing protection, and malicious file detection, targeting threats that operate entirely within legitimate sessions. Recent findings revealed that 82% of attack detections are malware-free, highlighting the need for enhanced browser-level security. Push Security recently blocked a novel attack technique called ConsentFix, which compromises Microsoft accounts without triggering traditional security alerts. This shift in security focus aims to mitigate the risks associated with modern web-based attacks.

Key Points: • Push Security introduces browser-native security to address gaps in traditional proxy-based tools. • 60% of malicious web pages go undetected by existing SWGs and CASBs due to structural limitations. • 82% of detected attacks are now malware-free, indicating a shift towards browser-level threats.