Summary: A recent attack campaign has highlighted the vulnerabilities associated with browser extensions, exposing over 2.6 million users’ cookies and identity data. This incident underscores the urgent need for organizations to address the security risks posed by browser extensions.

Threat Actor: Unknown | malicious browser extensions
Victim: Over 2.6 million users | browser extension users

Key Point :

• Compromised browser extensions can steal sensitive data such as cookies, passwords, and authentication tokens.
• Organizations face increased risks when employees install unvetted extensions without oversight.
• Security leaders must implement comprehensive strategies to audit and manage browser extension risks.
• LayerX is offering a complimentary audit to assess and remediate extension risks for organizations.