Extensions Inherently Risky For Businesses
The campaign serves as a cautionary tale – businesses should be wary when downloading and installing browser extensions. The problem is that this is currently not the case.
Extensions are ubiquitous in the modern workplace. The 2025 Enterprise Browser Extension Security Report we mentioned earlier, published by LayerX in May 2025, found that 99% of enterprises have at least one installed on their computer systems, while 52% of organizations run more than ten. Alarmingly, 53% of these installed extensions have “high” or “critical” risk permissions, granting them access to sensitive data.
To make matters worse, these extensions come from a variety of sources – some legit, some less so. LayerX also found that more than half (54%) are published anonymously, while 79% originate from publishers that have only released one extension, meaning that it’s virtually impossible to verify their authenticity.
