Copy-and-Paste Now Exceeds File Transferring as the Top Corporate Data Exfiltration Vector (scworld.com)
(Sunday November 16, 2025 @10:40PM (EditorDavid)
from the policy-problems dept.)
Slashdot reader [1]spatwei writes:
> It is now more common for data to [2]leave companies through copying and pasting than through file transfers and uploads, LayerX revealed in its [3]Browser Security Report 2025 .
>
> This shift is largely due to generative AI (genAI), with 77% of employees pasting data into AI prompts, and 32% of all copy-pastes from corporate accounts to non-corporate accounts occurring within genAI tools.
>
> 'Traditional governance built for email, file-sharing, and sanctioned SaaS didn't anticipate that copy/paste into a browser prompt would become the dominant leak vector,' LayerX CEO Or Eshed wrote in a blog post summarizing the report.
"GenAI now accounts for 11% of enterprise application usage," notes [4]this article from SC World , "with adoption rising faster than many data loss protection (DLP) controls can keep up. Overall, 45% of employees actively use AI tools, with 67% of these tools being accessed via personal accounts and ChatGPT making up 92% of all use..."
"With the rise of AI-driven browsers such as [5]OpenAI's Atlas and [6]Perplexity's Comet , governance of AI tools' access to corporate data becomes even more urgent, the LayerX report notes."
[1] https://slashdot.org/~spatwei
[2] https://www.scworld.com/news/copy-paste-now-exceeds-file-transfer-as-top-corporate-data-exfiltration-vector
[3] https://layerxsecurity.com/blog/why-the-browser-has-become-the-enterprises-most-overlooked-endpoint/
[4] https://www.scworld.com/news/copy-paste-now-exceeds-file-transfer-as-top-corporate-data-exfiltration-vector
[5] https://www.scworld.com/news/chatgpt-atlas-address-bar-a-new-avenue-for-prompt-injection-researchers-say
[6] https://www.scworld.com/news/ai-browser-risks-demonstrated-by-poc-sidebar-spoofing-attack
> It is now more common for data to [2]leave companies through copying and pasting than through file transfers and uploads, LayerX revealed in its [3]Browser Security Report 2025 .
>
> This shift is largely due to generative AI (genAI), with 77% of employees pasting data into AI prompts, and 32% of all copy-pastes from corporate accounts to non-corporate accounts occurring within genAI tools.
>
> 'Traditional governance built for email, file-sharing, and sanctioned SaaS didn't anticipate that copy/paste into a browser prompt would become the dominant leak vector,' LayerX CEO Or Eshed wrote in a blog post summarizing the report.
"GenAI now accounts for 11% of enterprise application usage," notes [4]this article from SC World , "with adoption rising faster than many data loss protection (DLP) controls can keep up. Overall, 45% of employees actively use AI tools, with 67% of these tools being accessed via personal accounts and ChatGPT making up 92% of all use..."
"With the rise of AI-driven browsers such as [5]OpenAI's Atlas and [6]Perplexity's Comet , governance of AI tools' access to corporate data becomes even more urgent, the LayerX report notes."
[1] https://slashdot.org/~spatwei
[2] https://www.scworld.com/news/copy-paste-now-exceeds-file-transfer-as-top-corporate-data-exfiltration-vector
[3] https://layerxsecurity.com/blog/why-the-browser-has-become-the-enterprises-most-overlooked-endpoint/
[4] https://www.scworld.com/news/copy-paste-now-exceeds-file-transfer-as-top-corporate-data-exfiltration-vector
[5] https://www.scworld.com/news/chatgpt-atlas-address-bar-a-new-avenue-for-prompt-injection-researchers-say
[6] https://www.scworld.com/news/ai-browser-risks-demonstrated-by-poc-sidebar-spoofing-attack