2024: A year of browser-based identity attacks

Browser-based identity attacks where attackers look to take over accounts on internet-facing apps and services are by far the most common attack experienced by organizations today. But the events of 2024 show that they’re now also the most impactful.

You can read our analysis of the most impactful identity breaches of 2024, and the lasting effect on attacker tooling and techniques that we can expect in 2025.

Or, check out our 2026 report on browser-based attack techniques.