{"id":370264,"date":"2026-06-16T07:04:10","date_gmt":"2026-06-16T14:04:10","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=370264"},"modified":"2026-06-17T00:11:29","modified_gmt":"2026-06-17T07:11:29","slug":"82-of-it-teams-already-lived-through-a-web-based-incident","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/82-of-it-teams-already-lived-through-a-web-based-incident\/","title":{"rendered":"82% of IT teams already lived through a web-based incident"},"content":{"rendered":"\n

Eight in ten. That’s the share of surveyed IT professionals whose organization handled a browser-related security incident in the past twelve months. Half describe the damage as moderate or severe, which in IT speak usually translates to someone calling their boss on a Sunday.<\/p>\n\n\n

\r\n
\r\n
\r\n
\r\n \"Nordlayer\"\r\n <\/div>\r\n
\r\n Nordlayer<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

The interesting part isn’t the headline percentage. It’s the profile of the companies hit hardest: BYOD policies, heavy SaaS use, remote-first teams. In other words, a normal 2026 company.<\/p>\n\n\n\n

“Hackers don’t hack anymore. They just log in.”<\/h2>\n\n\n\n

That’s the line from NordLayer’s<\/a> Andrius Buinovskis, and it does most of the work this report needs to do. Infostealer malware harvested around 1.8 million credentials and a staggering 68.8 billion cookies across 2025 alone. Once those are out, a login looks like any other login. Nothing trips. Nothing alarms.<\/p>\n\n\n\n

You don’t need a Hollywood breach. You need a stolen cookie.<\/p>\n\n\n\n

Your work is in the browser. Almost all of it.<\/h2>\n\n\n\n

NordLayer’s<\/a> team analyzed 504 of the highest-rated work applications across 51 categories on Gartner Peer Insights. Every one of them was reachable from a browser. Nearly 79% were browser only: no installable client, no desktop fallback. Open a tab, you’re in.<\/p>\n\n\n\n

That’s the new perimeter. It’s also why a single endpoint antivirus, by itself, isn’t really enough anymore.<\/p>\n\n\n\n

Confidence is high. Coverage is patchier than people think.<\/h2>\n\n\n\n

Here’s the contradiction the report keeps circling back to. 73% of IT pros say their organization is well prepared. Yet when you ask which specific browser controls they’ve actually deployed, the picture changes. DLP tools lead at just 53%. Everything else trails below that.<\/p>\n\n\n\n

The concern is genuine. 98% of respondents say their org is worried about web-based threats. 81% expect attacks to grow more elaborate. 73% expect more of them. The will is there. The tooling hasn’t caught up.<\/p>\n\n\n\n

Three things the report tells you to actually do<\/h2>\n\n\n\n

Buinovskis groups his advice into three priorities, and they read more like guardrails than silver bullets:<\/p>\n\n\n\n