Find notable cyber news and cases, enriched with sources, timelines, and signals.

Google Chrome Safety Check auto-revokes inactive-site notification permissions

Security Tool/Service
First reported
Last updated
Happening score
H score 10
1 unique sources, 1 articles

Summary

Hide ▲

Google is extending Chrome Safety Check to automatically revoke notification permissions for inactive sites, reducing alert overload and tightening browser permission control on desktop and Android. The change targets sites that send frequent alerts with very low engagement, and Chrome will notify users when access is removed. Users can restore permissions through Safety Check, by revisiting the site, or by disabling the automatic revocation feature.

Related Happenings

Google Cloud Platform API key revocation testing finds minutes-long post-deletion authentication

Technical Analysis
First: 21.05.2026 23:07 Last: 21.05.2026 23:07 Sources 1

About this happening: Testing showed **deleted Google Cloud Platform API keys** could still authenticate for **minutes after revocation**, creating a post-deletion abuse window that weakens **incident...

Google expands Gemini AI for malicious ad blocking on Google Ads

Security Tool/Service
First: 16.04.2026 18:24 Last: 16.04.2026 18:24 Sources 1

About this happening: **Google** expanded **Gemini AI** use across its ad platforms to detect and block **malicious ads** in real time, reducing scam and malvertising exposure at scale. The move matter...

108 Malicious Google Chrome extensions sharing a C2 backend

Malware Activity
First: 14.04.2026 11:35 Last: 14.04.2026 11:35 Sources 1

About this happening: **108 malicious Google Chrome extensions** were found to use the same **C2 infrastructure** to steal credentials, sessions, and browsing data while injecting ads and arbitrary Jav...

Google Chrome 146 adds Device Bound Session Credentials to block session-cookie theft

Security Tool/Service
First: 09.04.2026 21:33 Last: 09.04.2026 21:33 Sources 1

About this happening: Google has rolled out **Device Bound Session Credentials (DBSC)** in **Chrome 146 for Windows**, binding sessions to device hardware to blunt **infostealer malware** that steals s...

Google security patch release for CVE-2026-5281

Security Patch Release
First: 01.04.2026 13:25 Last: 01.04.2026 13:25 Sources 1

About this happening: **Google** issued **emergency Chrome updates** to fix **CVE-2026-5281**, a **use-after-free** flaw in **Dawn/WebGPU** that was **exploited in the wild**, creating crash, corruptio...

Timeline

  1. 10.10.2025 20:00 2 articles · 7mo ago

    Google Chrome auto-revokes inactive-site notification permissions

    Mitigation Patch Update

    Google is updating Chrome on desktop and Android to automatically revoke notification permissions for websites that have not been visited recently when those sites generate very low user engagement and a high volume of notifications. Chrome will notify users when access is removed, and users can restore notifications through Safety Check, by revisiting the site, or by disabling the automatic revocation feature.

    Show sources