Cybersecurity Software Fails to Detect Fifth of Brower-Based Phishing Attacks

Menlo Security's 2026 Browser Threat Report finds that browser-session phishing and social‑engineering techniques are increasingly bypassing legacy enterprise protections—reporting that roughly one in five phishing links engaged by users went undetected—because many security products are not designed to monitor or control activity at the browser session layer; the report urges organizations to adopt controls that govern the browser session to protect users and AI agent sessions.