Extensions, synced profiles and web apps with broad permissions have turned the browser into an operating system of its own. Attackers have noticed. Malicious extensions and session-token theft now account for a growing share of enterprise incidents.

What enterprise browsers offer

Managed browsers add policy, extension allowlists and data controls without a full endpoint agent. Adoption is accelerating in regulated sectors. The trade-off is lock-in to one vendor for a piece of software everyone has opinions about.

Key takeaways

  • Session-token theft is rising faster than malware
  • Extension allowlists are the quick win
  • Managed browsers bring policy to the tab

This story is part of our ongoing coverage of cybersecurity. We will update it as more details emerge.