Why browser extensions are a major security risk and what you can do about it

This report analyzes how browser extensions are abused as an attack vector—detailing real incidents (Vercel, Cyberhaven), a supply-chain campaign (Glassworm), and research showing large-scale extension-based data exfiltration—explains why existing controls fail, and recommends individual and organizational mitigations such as behavioral monitoring, pre-install blocking against live threat feeds, and visibility/approval workflows.