Report by Menlo Security

2026 State of Browser Security Threat Report

3 FINDINGSPublished Jun 10, 2026
View Original Report →

Key Findings

52,185 threats were hosted on domains that enterprise security stacks are configured to trust, including Google Drive, Dropbox, and SharePoint.

Cloud PlatformsPhishingBrowser Security

One in three highly evasive threats originated from sites classified as 'safe'.

Evasion TechniquesBrowser Security

One in five phishing links clicked by users went completely undetected by legacy URL filtering.

PhishingURL Filtering