Browser Detection and Response: Why Your Security Stack Needs Eyes Inside the Browser
Zscaler, Monday, October 5th, 2026
Zscaler makes the case for browser detection and response as EDR and network tools miss in-browser attacks.
Zscaler argues that browsers, where employees spend most working hours, are a prime target that most security teams barely monitor.
In-browser techniques include adversary-in-the-middle phishing, malicious OAuth grants, hijacked extensions, ClickFix social engineering and session token theft, while Microsoft's Work Trend Index finding that 78% of AI users bring their own AI tools points to new data exposure channels.
The post explains what browser detection and response means and why EDR and network security cannot see these threats.