01 UNTRUSTED EXTENSIONS Insights from Lode Palle LODE PALLE | CYBERSECURITY PRESENTATION THE CYBERSECURITY IMPACT OF Extensions interact deeply with webpages and browser content. Sensitive business data — including customer info, emails, and documents — can be exposed through untrusted extensions with excessive access. Data Exposure Risks PRIVACY & COMPLIANCE 02 BROWSER ACCESS Over 60% of data breaches are linked to browser extension vulnerabilities. Excessive permissions raise serious privacy and compliance concerns for organizations handling sensitive information. Malicious Extensions & Updates ACCOUNT BREACHES COMPROMISED UPDATES DISGUISED MALWARE Malicious software is frequently disguised as legitimate browser extensions, making detection difficult. Even trusted extensions can be compromised through malicious updates pushed to users silently. Developer account breaches dramatically increase risk exposure for all users of an extension. Regular monitoring and auditing of installed extensions is essential to spot suspicious behavior or unauthorized changes before damage occurs. 03 Excessive Permissions Create Risk Extensions often request access to all websites, far beyond what their core functionality requires, enabling them to read and interact with any page you visit. Overprivileged extensions can intercept, read, and alter browsing data in real time — including form inputs, cookies, and sensitive page content. Extensions with credential access can silently harvest login information, session tokens, and sensitive account data, posing severe security risks. Broad Website Access Read & Modify Browsing Data Access to Sensitive Accounts 01 02 03 04 Protecting Against Untrusted Extensions INSTALL FROM REPUTABLE SOURCES REVIEW PERMISSIONS REMOVE SUSPICIOUS EXTENSIONS MAINTAIN APPROVED LISTS Only install extensions from reputable sources and verified developers with a proven track record. Review extension permissions and privacy policies carefully before installation and after updates. Promptly remove unused or suspicious extensions to reduce your attack surface and exposure risk. Organizations should maintain an approved extension list and promote employee security awareness. 01 02 03 04 05 Building Safer Browser Environments Treat browser extensions as software with real security implications. According to Lode Palle, gain full visibility into installed extensions and their permissions. Combine user education, access controls, ongoing monitoring, and regular reviews. Emphasize secure browser management as reliance on web apps continues to grow. 06 Thank You for Your Attention. www.lodipalle.com We encourage you to review and secure your browser extensions proactively. Take the next step: audit installed extensions, enforce least privilege, and foster a culture of security awareness. Reach out for further discussion or consultancy on building safer browser environments. 7