Browser extensions are software too: A security checklist for business PCs
Browser extensions are treated as convenient add-ons rather than what they actually are: software installed on a business computer with significant access to network traffic, browsing data, and, in some cases, stored credentials. The Cybersecurity and Infrastructure Security Agency (CISA) has explicitly noted that browser extensions can carry high privilege levels and introduce substantial security… Continue reading Browser extensions are software too: A security checklist for business PCs
How to audit and manage browser extensions before they become a security problem
A browser extension with permission to read and change all your data on every website has roughly the same access to your activity as the browser itself. For individual users, that might be an acceptable tradeoff for a useful tool. For a business PC, it is an access level that deserves the same scrutiny as… Continue reading How to audit and manage browser extensions before they become a security problem
The security risk hiding in your browser’s extension bar
Most businesses carefully manage which software gets installed on company computers. Fewer apply the same discipline to browser extensions, even though extensions often carry permissions that rival those of traditional installed applications. The Cybersecurity and Infrastructure Security Agency’s (CISA) guidance on web browser security calls out extensions specifically as a source of elevated risk. This… Continue reading The security risk hiding in your browser’s extension bar