Article Details
Scrape Timestamp (UTC): 2024-03-27 11:02:53.457
Source: https://thehackernews.com/2024/03/sase-solutions-fall-short-without.html
Original Article Text
Click to Toggle View
SASE Solutions Fall Short Without Enterprise Browser Extensions, New Report Reveals. As SaaS applications dominate the business landscape, organizations need optimized network speed and robust security measures. Many of them have been turning to SASE, a product category that offers cloud-based network protection while enhancing network infrastructure performance. However, a new report: "Better Together: SASE and Enterprise Browser Extension for the SaaS-First Enterprise" (Download here), challenges SASE's ability to deliver comprehensive security against web-borne cyber threats on its own. From phishing attacks to malicious extensions and account takeovers, traditional network traffic analysis and security falls short. The report sheds light on these limitations and introduces the role of secure browser extensions as an essential component in a comprehensive security strategy. SASE Advantages and Limitations SASE takes on a dual role in addressing both infrastructure and security. However, while SASE offers clear advantages in security, it may not entirely cover the expanse of the web-borne threat landscape. SWG, CASB, and NGFW are not a silver bullet to all the security needs of the SaaS-first organization, even when they are packaged as SASE. The modern threat landscape is shaped by the centrality of the browser as a main working space. These new threats leverage the browser as a bridge between the device and organizational resources and aim to gain malicious access to the organization through phishing, malicious extensions, and account takeover, to name a few. While SASE is designed to protect the perimeter from threats that attempt to enter it, this new threat landscape relies on traffic from the browser to a SaaS app or website, which SASE does not entirely cover. Bridging the Gap with Secure Browser Extensions Secure browser extensions complement SASE's network security measures. Through deep session analysis and proactive threat prevention, these extensions provide granular visibility and real-time protection against sophisticated web-borne threats, effectively addressing the gaps left by SASE. SASE vs. Secure Browser Extensions: 3 Use Cases How do the differences between SASE and secure browser extensions play out when it comes to actual threats? The report provides three use cases. 1. Phishing 2. Malicious Extensions 3. Account Takeover With SaaS app usage becoming dominant, the more important the role of the browser becomes - and the threat landscape it encounters will increase. Can organizations ignore the risks that derive from the modern browser? According to LayerX, network security is insufficient on its own, and they call for complementary measures that can address SASE's gaps. To read more about how to gain real-time protection against this evolving risk with a secure browser extension, read the entire report. The Strategic Guide to Cloud Security Unlock practical steps to securing everything you build and run in the cloud. Goodbye, Atlassian Server. Goodbye… Backups? Protect your data on Atlassian Cloud from disaster with Rewind's daily backups and on-demand restores. Take Action Fast with Censys Search for Security Teams Stay ahead of advanced threat actors with best-in-class Internet intelligence from Censys Search.
Daily Brief Summary
SASE solutions are increasingly used by organizations to secure their cloud-based network and improve network performance.
A new report identifies significant gaps in SASE's ability to defend against web-borne cyber threats, including phishing and malicious browser extensions.
Secure browser extensions are critical for a comprehensive security strategy, offering real-time protection and granular visibility against sophisticated threats.
The report uses three use cases to illustrate the shortcomings of SASE and the added value of browser extensions: phishing attacks, malicious extensions, and account takeovers.
As SaaS applications become the norm, the browser's role as the main workspace has expanded, making it a critical point of vulnerability.
LayerX emphasizes that network security alone is not enough; organizations need to adopt additional measures such as secure browser extensions to mitigate risks.
For full insights on how secure browser extensions can provide real-time protection and complement SASE, the report is available for download.