AI Enablement playbook/Module 5 · Shadow AI & security

Day 45 / 100 · Shadow AI & security · Browser extensions and plug-ins

Don't trust the logo.

AI browser extensions often ask to read everything on every page you visit. Some are excellent. Some are built to steal.

The risks

What Can Go Wrong

  • Reading every page, including internal systems
  • Sending page content to unknown servers
  • Fake copies of popular AI tools
  • Updates that quietly change behaviour

The controls

What To Do

  • A managed allowlist in company browsers
  • Check the publisher, not just the name
  • Question broad permissions
  • Remove what nobody uses

Source: BleepingComputer ↗

Allowlist first. Install second.