Browser Extensions Are the Largest Unmanaged AI Attack Surface: 1-in-6 Enterprise Users Run AI Extensions, 60% More Likely to Have Vulnerabilities

The Hacker News·medium signalXBlueskyLinkedInCopy link

LayerX research reveals that AI browser extensions are 60% more likely to have vulnerabilities than average extensions, 3x more likely to access cookies, 2.5x more likely to execute remote scripts, and 6x more likely to have escalated permissions in the past year. About 1-in-6 enterprise users already use at least one AI extension, and these extensions bypass traditional security controls by accessing page content, user inputs, and session data without triggering policy enforcement.