72% of enterprise users have at least one browser extension with a known CVE. Pulled the numbers on our org and it tracks.

Came across this study and it pushed me to run the audit I'd been putting off. We came in slightly worse than the 72% benchmark. Most of it isn't malware, just abandoned grammar tools and a screen recorder a PM installed in 2022. The AI extension piece got me tho. They're 60% more likely to have