Browser extensions are your unmonitored endpoint: what Indian MSPs are finding when they audit what staff installed
Every managed fleet in India keeps an asset register. Laptops, phones, servers, licences, all of it tracked and reconciled quarterly. Very few of those registers record what is installed inside the browser, even though the browser is where most work now happens and where the session tokens live. MSPs that have started auditing extension inventories on behalf of clients are returning with counts nobody had budgeted for.
The reason this slipped through is architectural rather than careless. An extension sits between the user and every web application they open, and its permissions can include reading and modifying page content across all sites. That is wider access than most EDR agents hold. It arrives through a store, installs in seconds, updates itself silently, and never touches the CMDB.
Independent privacy research is direct about what those permissions make possible. Documentation from VPNOverview researchon the privacy risks of browser extensions describes...
Copyright of this story solely belongs to itvoice.in. To see the full text click HERE
