radar

ONE Sentinel

securitySecurity/THREATS/HIGH

LinkedIn secretely scans for 6,000+ Chrome extensions, collects data

sourceBleeping Computer
calendar_todayApril 3, 2026
schedule1 min read
lightbulb

EXECUTIVE SUMMARY

LinkedIn's Covert Browser Extension Scanning Raises Privacy Concerns

Summary

A report titled "BrowserGate" reveals that LinkedIn is using hidden JavaScript scripts to scan users' browsers for installed Chrome extensions and collect device data without user consent.

Key Points

  • LinkedIn, owned by Microsoft, is implicated in secretly scanning over 6,000 Chrome extensions.
  • The scanning is conducted through hidden JavaScript scripts embedded on LinkedIn's website.
  • This activity is part of a broader data collection effort targeting device information.
  • The report raises significant privacy concerns regarding user consent and data security.

Analysis

The revelation of LinkedIn's covert scanning activities highlights significant privacy and ethical issues, particularly concerning user consent and transparency. This practice could potentially expose sensitive user data and undermine trust in the platform. The report underscores the need for stringent data protection measures and regulatory oversight to safeguard user privacy.

Conclusion

IT professionals should be vigilant about the extensions installed on their browsers and consider implementing tools to monitor and block unauthorized data collection scripts. Regular audits of browser security settings and extension permissions are recommended to enhance privacy protection.