Malicious browser extensions are giving attackers another route into corporate environments, with phishing campaigns tricking users into installing tools capable of running arbitrary code. Cyber Daily’s David Hollingworth and Human break down how the so-called Edgecution attack method works, how initial access brokers fit into the ransomware ecosystem, and why even highly technical employees can fall for increasingly convincing social engineering.
The conversation then turns to what defenders can actually do about it. Human argues that security teams need to move beyond relying solely on detection and response, with application allow-listing and other proactive controls providing a critical layer of protection when users inevitably make mistakes.
Finally, Hollingworth and Human examine the future of Australia’s Essential Eight, including the move towards the new Essentials framework and potential guidance for enterprise, cloud, and AI environments.
Enjoy,
The Cyber Uncut team
Click here to listen on your device
Latest articles
