Majority of Browser Extensions Can Access Sensitive Enterprise Data, New Report Finds
Briefly

LayerX's Enterprise Browser Extension Security Report 2025 highlights the cybersecurity risks posed by browser extensions, revealing that 99% of employees have them installed, with over half able to access sensitive data. A concerning 54% of extension publishers remain unknown, complicating reputability assessments. The growing adoption of GenAI extensions, with over 20% of users having at least one that often comes with high-risk permissions, underscores the urgent need for organizations to address these vulnerabilities as part of their security strategies for 2025.
"Over 20% of users have at least one GenAI extension, and 58% of these have high-risk permission scopes. This indicates a significant threat vector that organizations need to address."
"The report reveals a growing concern that over half of extension developers are anonymous, complicating trust and risk assessment for IT leaders and security professionals."
Read at The Hacker News
[
|
]