Browser extensions are increasing the attack surface, putting employees and businesses at risk