Microsoft Edge: Automatically unsubscribe users from notifications sent by scam and malicious sites

🚨 The Signal: Microsoft Edge now automatically blocks notifications from sites identified as malicious by Defender SmartScreen. This enhances user protection against phishing and scam attempts by preventing further harmful alerts.

The Impact

All Edge users are affected, with a reduced risk of falling victim to notification-based phishing and scams.

• End Users: Reduced exposure to malicious notifications and phishing attempts.
• Security Teams: Decreased incident response burden related to notification-based attacks.
• Admins: Less need for manual intervention to block known malicious notification sources.

The Action

1. Educate users on the new Edge notification blocking feature and how to review/restore sites via edge://settings/privacy/sitePermissions/allPermissions/notifications.
2. Verify Microsoft Defender SmartScreen is enabled for all Edge users via Group Policy or Intune.
3. Review existing browser security policies to ensure they align with enhanced notification controls.

Domain: Defender · Impact: medium · Workload: Microsoft Defender · Essential Eight: User Application Hardening · ISM: ISM-1412, ISM-1485, ISM-1486, ISM-1542, ISM-1585, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1823, ISM-1824, ISM-1859, ISM-1860