Microsoft Edge 156 automatically disables alerts from domains detected pushing scams via Microsoft Defender SmartScreen or its built-in Scareware blocker. An information bar alerts users to these automatic blocks upon their next browser launch, while settings still permit manual reviews and unblocking. Users can also utilize a new "Block and report" feature on initial permission prompts to send suspicious URLs and screenshots directly to SmartScreen. Manual notification menus remain available to halt evasive alerts without clicking confusing buttons that launch extra windows.
Key points
Browser notifications used to deliver deceptive virus alerts are automatically halted usi…: Browser notifications used to deliver deceptive virus alerts are automatically halted using integrated security tools.
Users receive an alert banner upon launching the browser and keep the ability to manually…: Users receive an alert banner upon launching the browser and keep the ability to manually adjust permissions.
Direct reporting of suspicious permission prompts helps reinforce cloud-based threat dete…: Direct reporting of suspicious permission prompts helps reinforce cloud-based threat detection for all platform users.
Sources checked by our analysis pipeline: 1
Website notifications were designed to help us stay informed. They can alert you to a new message, remind you of an upcoming event, or share an important update from a service you trust.
But scammers are turning this useful browser feature into a persistent channel for fake virus warnings, security alerts, and other scams. They take advantage of our busy lives to persuade us to allow notifications from malicious sites. Selecting “Allow” can give a malicious site repeated opportunities to send fake virus warnings and deceptive security alerts. Even after you close the original page, notifications can lead back to the scam again and again.
Edge has been fighting notification spam for years and there are multiple workstreams actively detecting and blocking them by the billions. But now we’re improving protections using intelligence in the Edge browser and making it easier to report scams.
How Scareware reports uncovered malicious notification abuse
Enabled by default on qualifying PCs for just over a year, Scareware blocker in Edge directly protects tens of thousands of users per day against new scams. But Scareware…
Unauthorized access to internal systems resulted in the copying of user records across Singapore and Hong Kong after being detected on October 29. The incident exposed contact details and sensitive reward claim information for individuals using the platform to compare or apply for financial products. Company operations remain normal while regulators, including the Personal Data Protection Commission, have been notified and external cybersecurity investigators examine the scope.
Cyber attackers penetrated the personal finance portal's internal systems on Oct. 29, copying sensitive records submitted by customers seeking credit cards, loans, and insurance products. The incident exposed identifying credentials and financial profiles across two major Asian markets, prompting corporate outreach and regulatory notifications. The platform has contained the intrusion while forensic investigators assess the full scope of the compromise.
The unauthorized intrusion into the financial portal's internal systems exposed sensitive identity documents, income brackets, and insurance records across two key Asian markets. Independent digital forensics experts have been engaged to investigate the intrusion while the platform continues standard daily operations. Regulators across both jurisdictions have been formally notified as the company works to prevent future network vulnerabilities.