LayerX：2025年企业身份威胁报告：隐藏威胁解析（英文版）（12页）.pdf

1、THE ONLY REPORT THAT ANALYZES IDENTITY THREATS AT THE USERS POINT OF RISK IN THE BROWSER!The corporate identity is the new security perimeter of modern organizations.In the world of anywhere-work,with most work being done on browser-based SaaS applications,the corporate identity is what stands betwe

2、en keeping organizational data safe,and having it exposed.As a result,securing enterprise identities a key priority for security managers today.What Makes This Report Different(and what data you wont find anywhere else)The uniqueness of LayerXs data is derived from where we get our data from.LayerX

3、is an enterprise security platform deployed directly within our customers browsers.That means that unlike network-layer solutions,which have visibility only to the high-level session-level data,LayerX has visibility to every user action and activity within the browser,regardless of whether that user

4、 is connected to the IdP,using a personal or corporate account,or using a sanctioned or non-sanctioned SaaS application.As a result,LayerX can see and cross-correlate data across corporate and non-corporate accounts,identify user activity on malicious web pages that get through existing protections,

5、and gain visibility into browser activity that is hidden from network-layer or endpoint protections.The report herein covers a wide range of identity risks and threats,including:SummaryThe enterprise users most at risk for credential compromiseNon-corporate and non-SSO shadow identitiesPassword and

6、user account security,which can lead to exposure of user accountsEvasion techniques attackers employ to evade existing protectionsThe risk of browser extensions that have access to sensitive identity |And much moreKey FindingsJust 2%of Users Are Your Biggest Security Risk.These are users who have a