SquareX Reveals that Employees are No Longer the Weakest Link, Browser AI Agents Are

SquareX research warns that Browser AI Agents — automated browser-based assistants used by employees — are likely the new "weakest link" in enterprise security, demonstrating how such agents can be tricked into granting malicious OAuth permissions (exposing email and other sensitive data). The report recommends browser-native guardrails, detection-and-response capabilities, and future identity/access controls for agentic workflows to mitigate these client-side risks.