The Browser Security Field Manual

by Audrey Adeline, Vivek Ramachandran

In the past decade, the widespread adoption of cloud services and SaaS applications has fundamentally changed the way we work. Critical workflows and data are now created and stored in web apps, turning browsers into the primary gateway through which employees conduct both personal and work activities. Despite its central role in the modern workplace, browsers remain one of the least understood attack surfaces in cybersecurity. As attackers increasingly target employees in the browser, it is critical for security practitioners to understand browser native threats. The Browser Security Field Manual serves as a practical guide to the techniques adversaries are using to compromise organizations through their employees' browsers,

Advanced spearphishing techniquesMalicious browser extensionsBrowser data lossIdentity attacksBrowser-native ransomware

164 pages, Paperback

Published April 8, 2025