The Future of Browser Security: AI, Data Leaks & How to Stay Protected

[_Val_]

Here is the video recording of our session:

Slides are attached below.

Q&A Transcript

Q: Does a normal virus scan not detect the download of these AI sites?

A: The best security approach includes protection on multiple levels, starting from the earliest potentially malicious event.
Ideally, these fake websites should be blocked before the user even attempts to access them.

If that fails, malware downloads should be prevented — this is where virus scanning and sandboxing come in. However, this may not always be effective if the malware is heavily obfuscated, uses evasive techniques, or is simply too large to be analyzed quickly.

In the worst case, execution should be blocked as soon as it starts. Relying on just one layer of protection is often not enough.

Q: Can you create exceptions for blocks? Ie, the communications departments allowed for using social networking but not the rest of the environment

A: Yes, you can create exclusions as well as different policies per relevant groups

Q: Which modules of the Harmony Endpoint must be distributed for the Browser Security Settings in the Deployments policy?

A: You will need to deploy Threat Emulation in order to enable the browser extension and recieve the relevant policy.

Q: I know UBlock Origin recently was removed from the Google Store due to not supporting Manifest V3. Does the Harmony Browse support V3 and has full functionality?

A: Yes, Harmony Browse transitioned to Manifest V3 with all of its supported features.

Q: Will CP introduce any controls around blocking/allowing/denying malicious extensions?

A: It is in our plans for this year.

Q: Is this browser or extension-based?

A: Harmony Browse is a browser extension based solution. that can be deployed across all major browsers.

Q: Is Harmony Browse fully licensed in the “Harmony Endpoint Basic”? Or are other licenses required?

A: With Harmony Endpoint basic, you will not have all Browse capabilities. With HEP advanced, you are adding sandboxing, and with elite / DLP- add on, you add DLP and GenAI capabilities.

Q: Is GenAI Protect a separate product/service, or is it integrated into an existing one?

A: To be entitled to GenAI Protect, you can purchase Harmony Browse Advanced or Harmony Endpoint Elite \ DLP add on. The dashboard is part of Harmony SaaS, but you can easily move to it from the DLP policy

Q: How does HEP GenAI protection handle non-text data - e.g. images, audio?

A: We can detect per file, and adding OCR to detect sensitive data in images (should be early Q2)

Q: In order to use GenAI Protection, do I have to enable Harmony SaaS or only Browse or Browse extention in HEP would be enough to get GenAI Protection Benefits?

A: Just install the Harmony Browse/Browser extension in HEP. You should then be able to access Harmony SaaS (click on "Start" on the Infinity portal to do so), and you'll see the GenAI Protect dashboard there.

[Murat_TURAN]

I couldn't make it because of a last minute commitment. Thank you very much.

[_Val_]

Sure thing

[the_rock]

Super informative! Thanks @_Val_