Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

This report warns that AI browser extensions are a broadly adopted and under-monitored attack surface: they frequently request elevated permissions (cookie access, scripting, tab control), are likelier to have CVEs or change permissions over time, and can bypass traditional DLP and SaaS monitoring. The authors recommend organization-wide extension inventories, targeted controls for AI extensions, behavioral analysis, and trust/transparency criteria to reduce exposure.