INTEL-41: The Browser Reads Your AI Chats

Tue, 27 Oct 2026 00:00:00 +0000

The INTEL

Malicious browser extensions posing as AI assistants reached about 900,000 installs and was active inside more than 20,000 enterprise tenants, quietly collecting AI chat histories, prompts and responses from platforms such as ChatGPT and DeepSeek. Microsoft says that exposed “proprietary code, business strategies, and other sensitive information.”

The finding comes from Microsoft’s 2026 Digital Defense Report, which calls AI browsers “a material enterprise risk” because they combine three conditions security leaders rarely face at the same time: “broad adoption, high-trust access, and limited security visibility.” Microsoft sees AI browsers in daily use at more than 40% of organizations in its dataset. Attackers have noticed: in a May 2026 analysis, Microsoft found AI browsers were the initial infection vector in incidents involving 57 distinct malware families.

Browser Security on FIR Risk Advisory | Risk Intelligence. Engineered.

INTEL-41: The Browser Reads Your AI Chats

The INTEL