LastPass CEO: If the Browser is AI's New Interface, What Does it Mean for Security?

Feb 7, 2026

Karim Toubba, CEO of LastPass and longtime cybersecurity leader, offers a clear take on the browser becoming the workplace and AI interface. He explores shadow AI, agentic AI breaking authentication, and how browsers concentrate identity, data, and risk. He also discusses secure browser extensions, visibility gaps in SaaS and AI, and practical steps for protecting credentials and control.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

INSIGHT

Browser As The New Enterprise OS

The browser has become the de facto enterprise operating system where most work happens.
This shift creates a new focal point for productivity and security that organizations must address.

INSIGHT

Shadow AI Hides Critical Blind Spots

Shadow AI extends the old shadow IT problem by hiding AI usage and data uploads from IT.
Lack of visibility into which AI tools and accounts employees use increases organizational risk.

INSIGHT

Browser Is The Attackers' Soft Underbelly

Attackers focus on the browser because it's where users and AI tools converge and expose data.
A large share of malware and breaches now originates in browser activity.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

Is the browser quietly becoming the most powerful and dangerous interface in modern work?

In this episode of Tech Talks Daily, I sat down with Karim Toubba, CEO of LastPass, to unpack a shift that many people feel every day but rarely stop to question.

The browser is no longer just a window to the internet. It has become the place where work happens, where SaaS lives, and increasingly, where humans and AI agents meet data, credentials, and decisions. From AI-native browsers to prompt-based navigation and headless agents acting on our behalf, the way we access information is changing fast, and so are the risks.

Karim shares why this moment feels different from earlier waves like SaaS adoption or remote work. Today, more than ever, productivity, identity, and security collide inside the browser.

Shadow AI is spreading faster than most organizations can track, personal accounts are being used to access powerful AI tools, and sensitive data is being uploaded with little visibility or control. At the same time, attackers have noticed that the browser has become the soft underbelly of the enterprise, with a growing share of malware and breaches originating there.

We also explore the rise of agentic AI and what happens when software, not people, starts logging into systems. When an agent books travel, pulls data, or completes workflows on a user's behalf, traditional authentication and access models start to break down.

Karim explains why identity, visibility, and control must evolve together, and why secure browser extensions are emerging as a practical foundation for this next phase of computing. The conversation goes deep into what users do not see when AI browsers ask for access to email, calendars, and internal apps, and why convenience often masks long-term exposure.

Throughout the discussion, Karim brings a grounded perspective shaped by decades in cybersecurity, from risk-based vulnerability management to enterprise threat intelligence. Rather than pushing fear, he focuses on realistic steps organizations and individuals can take, from understanding what data is being shared, to treating security teams as partners, to using tools that bring passwords, passkeys, and authentication into one trusted place as browsing evolves.

As AI reshapes how we search, work, and make decisions, the question is no longer whether the browser matters. It is whether we are ready for it to act as the front door to both our productivity and our risk, so are you securing your browser for the future you are already using today?