[{"data":1,"prerenderedAt":1095},["ShallowReactive",2],{"application-flags":3,"navbar":7,"always-visible-banner":36,"navbar-about-highlight":100,"navbar-resource-highlight":174,"blog/product-release-may-2026":220},[4],{"enabled":5,"name":6},false,"maintenanceMode",[8],{"createdDate":9,"id":10,"name":11,"modelId":12,"published":13,"query":14,"data":15,"variations":20,"lastUpdated":21,"firstPublished":22,"testRatio":23,"createdBy":24,"lastUpdatedBy":25,"folders":26,"meta":27,"rev":35},1742208588866,"1c7a4e423bf54ac1a328bb4063459ef2","Banner","1c6207a5f24948ab82d4a0b17f251193","published",[],{"type":16,"url":17,"text":18,"link":19},"web-banner","https://pushsecurity.com/resources/browser-attacks-report","Get our latest report analyzing browser attack techniques in 2026",{},{},1774258294825,1742208637545,1,"CydmZnOWU1XuAaLhEDCoYNM4Z8W2","jKjF9r5jcvXU8tzZEfFQm31Iyvr2",[],{"kind":28,"lastPreviewUrl":29,"breakpoints":30,"hasAutosaves":34},"data","",{"xsmall":31,"small":32,"medium":33},320,640,768,true,"dvapm2h7god",{"createdDate":37,"id":38,"name":39,"modelId":40,"published":13,"stageModifiedSincePublish":5,"query":41,"data":42,"variations":89,"lastUpdated":90,"firstPublished":91,"testRatio":23,"createdBy":92,"lastUpdatedBy":93,"folders":94,"meta":95,"rev":99},1774965361051,"fd266d0172cc47429be7ad10f48c99ad","always visible banner","0678d178ec8b41efb8a23c09dba7874d",[],{"url":29,"ctaText":43,"text":44,"blocks":45,"state":85},"ewrererw","testrfesssssssssss",[46,73],{"@type":47,"@version":48,"id":49,"component":50,"responsiveStyles":63},"@builder.io/sdk:Element",2,"builder-ca12c06a52de41d7b8743da53118cd38",{"name":51,"tag":51,"options":52,"isRSC":62},"TopBannerContent",{"text":53,"ctaText":54,"url":55,"mainText":56,"cta":59},"New Webinar Series: Join John Hammond, Troy Hunt, and Matt Johansen for the State of Browser Attacks","Save Your Spot","https://pushsecurity.com/webinar/state-of-browser-security",{"content":57,"fontSize":58},"\u003Cp>Is your stack covered? 51 browser & identity attacks, mapped.\u003C/p>","text-base",{"content":60,"fontSize":58,"url":61},"\u003Cp>\u003Cstrong style=\"font-weight:700;\">See the matrix →\u003C/strong>\u003C/p>\n","https://pushsecurity.com/resources/browser-identity-attacks-matrix/",null,{"large":64},{"display":65,"flexDirection":66,"position":67,"flexShrink":68,"boxSizing":69,"marginTop":70,"marginBottom":70,"fontSize":71,"fontWeight":72},"flex","column","relative","0","border-box",".56rem","1.125rem","700",{"id":74,"@type":47,"tagName":75,"properties":76,"responsiveStyles":80},"builder-pixel-b92kcxejcyr","img",{"src":77,"aria-hidden":78,"alt":29,"role":79,"width":68,"height":68},"https://cdn.builder.io/api/v1/pixel?apiKey=f3a1111ff5be48cdbb123cd9f5795a05","true","presentation",{"large":81},{"height":68,"width":68,"display":82,"opacity":68,"overflow":83,"pointerEvents":84},"block","hidden","none",{"deviceSize":86,"location":87},"large",{"path":29,"query":88},{},{},1778612252607,1774968080803,"ST0tXQM8slWpFrmioqKHmENB2qe2","ax7YYfD0OCeqT1Vxxv1G4FUbqVr1",[],{"kind":96,"hasLinks":5,"breakpoints":97,"lastPreviewUrl":98,"hasAutosaves":34,"hasErrors":5},"component",{"xsmall":31,"small":32,"medium":33},"https://pushsecurity.com/?builder.space=f3a1111ff5be48cdbb123cd9f5795a05&builder.user.permissions=read%2Ccreate%2Cpublish%2CeditCode%2CeditDesigns%2CeditLayouts%2CeditLayers%2CeditContentPriority%2CeditFolders%2CeditProjects%2CmodifyMcpServers%2CmodifyWorkflowIntegrations%2CmodifyProjectSettings%2CconnectCodeRepository%2CcreateProjects%2CindexDesignSystems%2CsendPullRequests%2CmergePullRequests&builder.user.role.name=Developer&builder.user.role.id=developer&builder.cachebust=true&builder.preview=always-visible-banner&builder.noCache=true&builder.allowTextEdit=true&__builder_editing__=true&builder.overrides.always-visible-banner=fd266d0172cc47429be7ad10f48c99ad&builder.overrides.fd266d0172cc47429be7ad10f48c99ad=fd266d0172cc47429be7ad10f48c99ad&builder.options.locale=Default","avvo0y7xujg",[101,137],{"createdDate":102,"id":103,"name":104,"modelId":105,"published":13,"stageModifiedSincePublish":5,"query":106,"data":107,"variations":130,"lastUpdated":131,"firstPublished":132,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":133,"meta":134,"rev":136},1776247359804,"9136a8f18b3b4a6ba29b8653a99372b1","testimonial-inductive-automation","20d9eaa352304613b3d1a794b400703d",[],{"link":108,"type":109,"testimonialLink":110,"testimonial":111},{},"testimonial","/customer-stories/inductive-automation",{"@type":112,"id":113,"model":109,"value":114},"@builder.io/core:Reference","f028f2b685bb47cd8bf9e82a26dd5a79",{"query":115,"folders":116,"createdDate":117,"id":113,"name":118,"modelId":119,"published":13,"data":120,"variations":124,"lastUpdated":125,"firstPublished":126,"testRatio":23,"createdBy":92,"lastUpdatedBy":92,"meta":127,"rev":129},[],[],1735823466309,"We found Push to be more accurate when compared to competitors and the browser agent offered features that others couldn’t match.","42035571a56940ac98bff4544aa79aa5",{"author":121,"jobTitle":122,"quote":118,"image":123},"Jason Waits","\u003Cp>CISO at Inductive Automation\u003C/p>","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2Ff04c0c0689ce4a89ac0f0708d78c0a07",{},1735910703862,1735823501152,{"kind":28,"lastPreviewUrl":29,"breakpoints":128,"hasAutosaves":34},{"small":32,"medium":33},"cp10v96zu1b",{},1776247404986,1776247404973,[],{"breakpoints":135,"kind":28,"lastPreviewUrl":29,"hasAutosaves":5},{"xsmall":31,"small":32,"medium":33},"10c1efgj5va",{"createdDate":138,"id":139,"name":140,"modelId":105,"published":13,"meta":141,"stageModifiedSincePublish":5,"query":143,"data":144,"variations":170,"lastUpdated":171,"firstPublished":172,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":173,"rev":136},1776255761419,"05a9322735fc427db12e2740e4302300","Report: 2026 Browser Attack Techniques",{"breakpoints":142,"kind":28,"lastPreviewUrl":29,"hasAutosaves":5},{"xsmall":31,"small":32,"medium":33},[],{"testimonial":145,"link":164,"type":167,"title":140,"description":168,"image":169},{"@type":112,"id":146,"model":109,"value":147},"192acbb1f9ca4cac918c0ec435a8bae3",{"query":148,"folders":149,"createdDate":150,"id":146,"name":151,"modelId":119,"published":13,"data":152,"variations":158,"lastUpdated":159,"firstPublished":160,"testRatio":23,"createdBy":92,"lastUpdatedBy":24,"meta":161,"rev":163},[],[],1728981467463,"Push does for identity what CrowdStrike did for the endpoint",{"video":153,"jobTitle":154,"author":155,"qoute":29,"quote":156,"image":157},"https://cdn.builder.io/o/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F8b30e8ca50064058bbaef0f3c6164575%2Fcompressed?apiKey=f3a1111ff5be48cdbb123cd9f5795a05&token=8b30e8ca50064058bbaef0f3c6164575&alt=media&optimized=true","\u003Cp>Deputy CISO at Microsoft\u003C/p>\u003Cp>Former LinkedIn, Slack, Palantir\u003C/p>","Geoff Belknap","Push does for identity what CrowdStrike did for the endpoint.","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F748f0ad0a5064a00a13f4721fcc8dea1",{},1742902158597,1728981782923,{"kind":28,"lastPreviewUrl":29,"breakpoints":162,"hasAutosaves":34},{"small":32,"medium":33},"j436mu0ufu",{"text":165,"url":166},"Download now","/resources/browser-attacks-report","resource","Learn about the latest techniques being used in the wild.","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F7b4a5ebf81d64e8c9d7fc35f6c96c4a9",{},1776255810913,1776255810900,[],[175,198],{"createdDate":176,"id":177,"name":140,"modelId":178,"published":13,"meta":179,"stageModifiedSincePublish":5,"query":181,"data":182,"variations":193,"lastUpdated":194,"firstPublished":195,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":196,"rev":197},1776256900280,"1f429607996e4e5fae8fe3f9b9610e55","4829faa81e7c4ee8bd2d000e160e8d3c",{"breakpoints":180,"kind":28,"lastPreviewUrl":29,"hasAutosaves":5},{"xsmall":31,"small":32,"medium":33},[],{"testimonial":183,"link":192,"type":167,"title":140,"description":168,"image":169},{"@type":112,"id":146,"model":109,"value":184},{"query":185,"folders":186,"createdDate":150,"id":146,"name":151,"modelId":119,"published":13,"data":187,"variations":188,"lastUpdated":159,"firstPublished":160,"testRatio":23,"createdBy":92,"lastUpdatedBy":24,"meta":189,"rev":191},[],[],{"video":153,"jobTitle":154,"author":155,"qoute":29,"quote":156,"image":157},{},{"kind":28,"lastPreviewUrl":29,"breakpoints":190,"hasAutosaves":34},{"small":32,"medium":33},"m86lrznq8un",{"text":165,"url":166},{},1776256937553,1776256937540,[],"6f32flcianp",{"createdDate":199,"id":200,"name":201,"modelId":178,"published":13,"stageModifiedSincePublish":5,"query":202,"data":203,"variations":214,"lastUpdated":215,"firstPublished":216,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":217,"meta":218,"rev":197},1776256949234,"ce043785b71b4ece98eac811ecf4ba10","inductive-automation",[],{"link":204,"type":109,"testimonial":205,"testimonialLink":110},{},{"@type":112,"id":113,"model":109,"value":206},{"query":207,"folders":208,"createdDate":117,"id":113,"name":118,"modelId":119,"published":13,"data":209,"variations":210,"lastUpdated":125,"firstPublished":126,"testRatio":23,"createdBy":92,"lastUpdatedBy":92,"meta":211,"rev":213},[],[],{"author":121,"jobTitle":122,"quote":118,"image":123},{},{"kind":28,"lastPreviewUrl":29,"breakpoints":212,"hasAutosaves":34},{"small":32,"medium":33},"f18g50edx4s",{},1776256974140,1776256974130,[],{"breakpoints":219,"kind":28,"lastPreviewUrl":29,"hasAutosaves":5},{"xsmall":31,"small":32,"medium":33},{"id":221,"title":222,"authorsCollection":223,"content":231,"extension":548,"featured":5,"hashTags":62,"meta":549,"metaTitle":550,"ogImage":62,"publishedDate":551,"relatedBlogPostsCollection":552,"slug":1073,"stem":1074,"subtitle":62,"summary":1075,"synopsis":1086,"sys":1087,"tagsCollection":1090,"__hash__":1094},"blog/blog/product-release-may-2026.json","Product release: May 2026",{"items":224},[225],{"fullName":226,"firstName":227,"jobTitle":228,"profilePicture":229},"Andy Waugh","Andy","VP Product",{"url":230},"https://images.ctfassets.net/y1cdw1ablpvd/3Rf76rJn6S9inMb4dUnAIJ/0a787f8141d05b95300e2fe77c4493fa/DSC_6868.jpg",{"json":232,"links":524},{"data":233,"content":234,"nodeType":523},{},[235,244,290,297,304,311,318,361,379,386,393,400,417,424,445,451,458,477,484,502,509,516],{"data":236,"content":237,"nodeType":243},{},[238],{"data":239,"marks":240,"value":241,"nodeType":242},{},[],"What’s new this month","text","heading-1",{"data":245,"content":246,"nodeType":289},{},[247,259,269,279],{"data":248,"content":249,"nodeType":258},{},[250],{"data":251,"content":252,"nodeType":257},{},[253],{"data":254,"marks":255,"value":256,"nodeType":242},{},[],"Custom detections","paragraph","list-item",{"data":260,"content":261,"nodeType":258},{},[262],{"data":263,"content":264,"nodeType":257},{},[265],{"data":266,"marks":267,"value":268,"nodeType":242},{},[],"File download telemetry",{"data":270,"content":271,"nodeType":258},{},[272],{"data":273,"content":274,"nodeType":257},{},[275],{"data":276,"marks":277,"value":278,"nodeType":242},{},[],"Prevent password entry into non-password fields",{"data":280,"content":281,"nodeType":258},{},[282],{"data":283,"content":284,"nodeType":257},{},[285],{"data":286,"marks":287,"value":288,"nodeType":242},{},[],"Expansion of Events window to 30 days","unordered-list",{"data":291,"content":292,"nodeType":243},{},[293],{"data":294,"marks":295,"value":296,"nodeType":242},{},[],"Create your own custom detections",{"data":298,"content":299,"nodeType":257},{},[300],{"data":301,"marks":302,"value":303,"nodeType":242},{},[],"You can now write your own detections using Push’s real-time detection engine to target specific elements of the page DOM, web requests and responses, HTTP headers such as cookies, and a lot more.",{"data":305,"content":306,"nodeType":257},{},[307],{"data":308,"marks":309,"value":310,"nodeType":242},{},[],"Rules are written in YAML in the Push admin console. You can define a response action (e.g. Warn or Block) and customize the end-user message, similar to other Push controls.",{"data":312,"content":313,"nodeType":257},{},[314],{"data":315,"marks":316,"value":317,"nodeType":242},{},[],"Example use cases:",{"data":319,"content":320,"nodeType":289},{},[321,331,341,351],{"data":322,"content":323,"nodeType":258},{},[324],{"data":325,"content":326,"nodeType":257},{},[327],{"data":328,"marks":329,"value":330,"nodeType":242},{},[],"Detect a specific IOC or TTP for campaigns targeting your organization.",{"data":332,"content":333,"nodeType":258},{},[334],{"data":335,"content":336,"nodeType":257},{},[337],{"data":338,"marks":339,"value":340,"nodeType":242},{},[],"Partner with your red team to detect custom tooling during pen testing.",{"data":342,"content":343,"nodeType":258},{},[344],{"data":345,"content":346,"nodeType":257},{},[347],{"data":348,"marks":349,"value":350,"nodeType":242},{},[],"Alert on specific user behaviors on webpages that point to risk or violate policy.",{"data":352,"content":353,"nodeType":258},{},[354],{"data":355,"content":356,"nodeType":257},{},[357],{"data":358,"marks":359,"value":360,"nodeType":242},{},[],"Block unauthorized MCP connections.",{"data":362,"content":363,"nodeType":257},{},[364,367,376],{"data":365,"marks":366,"value":29,"nodeType":242},{},[],{"data":368,"content":370,"nodeType":375},{"uri":369},"https://pushsecurity.com/help/audience/engineering/resources/custom-detections",[371],{"data":372,"marks":373,"value":374,"nodeType":242},{},[],"Learn more","hyperlink",{"data":377,"marks":378,"value":29,"nodeType":242},{},[],{"data":380,"content":381,"nodeType":243},{},[382],{"data":383,"marks":384,"value":385,"nodeType":242},{},[],"Stream telemetry on file download events",{"data":387,"content":388,"nodeType":257},{},[389],{"data":390,"marks":391,"value":392,"nodeType":242},{},[],"You can now consume a feed of file download events into your SIEM or SOAR. These events report file metadata, such as file name, download URLs, and MIME type, as well as whether the download was considered unsafe.",{"data":394,"content":395,"nodeType":257},{},[396],{"data":397,"marks":398,"value":399,"nodeType":242},{},[],"Events are generated for traditional network-based downloads, but also downloads of files constructed in the browser, such as those via blob or data URLs.",{"data":401,"content":402,"nodeType":257},{},[403,407,413],{"data":404,"marks":405,"value":406,"nodeType":242},{},[],"You can enable this feed for all employees, employee groups, or specific individuals; and for all profiles, profiles logged in with a company domain, or profiles logged in with a non-company domain. Go to ",{"data":408,"marks":409,"value":412,"nodeType":242},{},[410],{"type":411},"bold","Settings > Telemetry > File downloads",{"data":414,"marks":415,"value":416,"nodeType":242},{},[]," to configure it.",{"data":418,"content":419,"nodeType":257},{},[420],{"data":421,"marks":422,"value":423,"nodeType":242},{},[],"Next, we’ll be adding a control that allows you implement a policy around which downloads are permitted from where, so you can block unwanted or potentially malicious files directly at the point of download.",{"data":425,"content":426,"nodeType":257},{},[427,430,442],{"data":428,"marks":429,"value":29,"nodeType":242},{},[],{"data":431,"content":437,"nodeType":441},{"target":432},{"sys":433},{"id":434,"type":435,"linkType":436},"2gzIJQtEn6hEzpGlpyVg2m","Link","Entry",[438],{"data":439,"marks":440,"value":374,"nodeType":242},{},[],"entry-hyperlink",{"data":443,"marks":444,"value":29,"nodeType":242},{},[],{"data":446,"content":447,"nodeType":243},{},[448],{"data":449,"marks":450,"value":278,"nodeType":242},{},[],{"data":452,"content":453,"nodeType":257},{},[454],{"data":455,"marks":456,"value":457,"nodeType":242},{},[],"You can prevent users from mistakenly entering their password into non-password fields such as username or email fields when they’re signing in to the app that password is associated with.",{"data":459,"content":460,"nodeType":257},{},[461,465,473],{"data":462,"marks":463,"value":464,"nodeType":242},{},[],"You may wish to prevent the entry of passwords into non-password fields particularly for core applications like your identity provider. By blocking incorrect password entry, you can avoid inadvertently recording passwords in your app logs, which can ",{"data":466,"content":468,"nodeType":375},{"uri":467},"https://attack.mitre.org/techniques/T1552/001/",[469],{"data":470,"marks":471,"value":472,"nodeType":242},{},[],"introduce security risk",{"data":474,"marks":475,"value":476,"nodeType":242},{},[],".",{"data":478,"content":482,"nodeType":483},{"target":479},{"sys":480},{"id":481,"type":435,"linkType":436},"1utNf3bb143PvfGS0BvDUK",[],"embedded-entry-block",{"data":485,"content":486,"nodeType":257},{},[487,490,499],{"data":488,"marks":489,"value":29,"nodeType":242},{},[],{"data":491,"content":495,"nodeType":441},{"target":492},{"sys":493},{"id":494,"type":435,"linkType":436},"2h2EfKDrmw2ZsXFQuBZmS4",[496],{"data":497,"marks":498,"value":374,"nodeType":242},{},[],{"data":500,"marks":501,"value":29,"nodeType":242},{},[],{"data":503,"content":504,"nodeType":243},{},[505],{"data":506,"marks":507,"value":508,"nodeType":242},{},[],"Events page now displays up to 30 days of data",{"data":510,"content":511,"nodeType":257},{},[512],{"data":513,"marks":514,"value":515,"nodeType":242},{},[],"We’ve expanded the storage window for events viewable on the Push admin console Events page to assist with quick triage. It is now 30 days, instead of 7.",{"data":517,"content":518,"nodeType":257},{},[519],{"data":520,"marks":521,"value":522,"nodeType":242},{},[],"As before, we recommend ingesting Push events into your SIEM for longer-term storage, querying, and correlation.\n","document",{"entries":525},{"inline":526,"hyperlink":527,"block":539},[],[528,534],{"sys":529,"__typename":530,"articleId":531,"title":532,"slug":533},{"id":434},"HelpArticle",10153,"Can Push detect and alert on file downloads?","can-push-detect-and-alert-on-file-downloads",{"sys":535,"__typename":530,"articleId":536,"title":537,"slug":538},{"id":494},10151,"Can Push prevent password entry in username fields?","can-push-prevent-password-entry-in-username-fields",[540],{"sys":541,"__typename":542,"title":543,"caption":62,"layoutMode":62,"file":544},{"id":481},"Image","Password entry prevention tooltip - KB 10151",{"url":545,"width":546,"height":547},"https://images.ctfassets.net/y1cdw1ablpvd/7m6BPXQ232ZUaRqwMpPptZ/c724034f56f6a46d39dc0f44a9fae1f4/password_entry_tooltip.png",1999,1565,"json",{},"Push Security new product features for May 2026","2026-05-29T00:00:00.000Z",{"items":553},[554],{"__typename":555,"sys":556,"publishedDate":558,"content":559,"title":1060,"synopsis":1061,"hashTags":62,"slug":1062,"tagsCollection":1063,"authorsCollection":1069},"BlogPosts",{"id":557},"3Yw48rVLntipUijLR0CYf2","2026-03-10T00:00:00.000Z",{"json":560},{"data":561,"content":562,"nodeType":523},{},[563,570,633,640,647,663,679,685,703,709,725,732,738,756,762,783,817,835,841,848,863,869,887,893,900,924,949,967,974,981,1054],{"data":564,"content":565,"nodeType":243},{},[566],{"data":567,"marks":568,"value":569,"nodeType":242},{},[],"What's new this month:",{"data":571,"content":572,"nodeType":289},{},[573,583,593,603,613,623],{"data":574,"content":575,"nodeType":258},{},[576],{"data":577,"content":578,"nodeType":257},{},[579],{"data":580,"marks":581,"value":582,"nodeType":242},{},[],"Detect malicious browser extensions",{"data":584,"content":585,"nodeType":258},{},[586],{"data":587,"content":588,"nodeType":257},{},[589],{"data":590,"marks":591,"value":592,"nodeType":242},{},[],"Create a blocklist or allowlist for browser extensions",{"data":594,"content":595,"nodeType":258},{},[596],{"data":597,"content":598,"nodeType":257},{},[599],{"data":600,"marks":601,"value":602,"nodeType":242},{},[],"Block ClickFix-style attacks and collect payloads for investigation",{"data":604,"content":605,"nodeType":258},{},[606],{"data":607,"content":608,"nodeType":257},{},[609],{"data":610,"marks":611,"value":612,"nodeType":242},{},[],"Custom branding for employee-facing banners and block pages",{"data":614,"content":615,"nodeType":258},{},[616],{"data":617,"content":618,"nodeType":257},{},[619],{"data":620,"marks":621,"value":622,"nodeType":242},{},[],"Collect additional metadata to support threat detection",{"data":624,"content":625,"nodeType":258},{},[626],{"data":627,"content":628,"nodeType":257},{},[629],{"data":630,"marks":631,"value":632,"nodeType":242},{},[],"And a few other things … ",{"data":634,"content":635,"nodeType":243},{},[636],{"data":637,"marks":638,"value":639,"nodeType":242},{},[],"Detect malicious extensions",{"data":641,"content":642,"nodeType":257},{},[643],{"data":644,"marks":645,"value":646,"nodeType":242},{},[],"Push can now detect and block malicious browser extensions found in your environment. ",{"data":648,"content":649,"nodeType":257},{},[650,654,659],{"data":651,"marks":652,"value":653,"nodeType":242},{},[],"Push maintains a global list of malicious extensions based on our own threat research and publicly available threat intelligence. When an extension in your environment matches a malicious extension ID, Push will raise a detection on the ",{"data":655,"marks":656,"value":658,"nodeType":242},{},[657],{"type":411},"Detections",{"data":660,"marks":661,"value":662,"nodeType":242},{},[]," page of the Push admin console. You can also configure the control to warn or block users automatically.",{"data":664,"content":665,"nodeType":257},{},[666,670,675],{"data":667,"marks":668,"value":669,"nodeType":242},{},[],"To enable malicious extension detection, go to the ",{"data":671,"marks":672,"value":674,"nodeType":242},{},[673],{"type":411},"Controls",{"data":676,"marks":677,"value":678,"nodeType":242},{},[]," page in the Push admin console. ",{"data":680,"content":684,"nodeType":483},{"target":681},{"sys":682},{"id":683,"type":435,"linkType":436},"1QV5UQ04MYLpWY7jTocvO4",[],{"data":686,"content":687,"nodeType":257},{},[688,691,700],{"data":689,"marks":690,"value":29,"nodeType":242},{},[],{"data":692,"content":696,"nodeType":441},{"target":693},{"sys":694},{"id":695,"type":435,"linkType":436},"5NyiWgjMDwk16XZ0S681JK",[697],{"data":698,"marks":699,"value":374,"nodeType":242},{},[],{"data":701,"marks":702,"value":29,"nodeType":242},{},[],{"data":704,"content":705,"nodeType":243},{},[706],{"data":707,"marks":708,"value":592,"nodeType":242},{},[],{"data":710,"content":711,"nodeType":257},{},[712,716,721],{"data":713,"marks":714,"value":715,"nodeType":242},{},[],"You can also block unwanted extensions or allowlist only the extensions you want in your environment, using Push’s ",{"data":717,"marks":718,"value":720,"nodeType":242},{},[719],{"type":411},"Browser extension blocking",{"data":722,"marks":723,"value":724,"nodeType":242},{},[]," control.",{"data":726,"content":727,"nodeType":257},{},[728],{"data":729,"marks":730,"value":731,"nodeType":242},{},[],"End-users will see a block page if they attempt to enable a blocked extension or install one via the Chrome or Microsoft extension stores.",{"data":733,"content":737,"nodeType":483},{"target":734},{"sys":735},{"id":736,"type":435,"linkType":436},"3OCdGfsyNTLXQx77dwzY9L",[],{"data":739,"content":740,"nodeType":257},{},[741,744,753],{"data":742,"marks":743,"value":29,"nodeType":242},{},[],{"data":745,"content":749,"nodeType":441},{"target":746},{"sys":747},{"id":748,"type":435,"linkType":436},"3ibVBa6u0XfcXXDVtON5th",[750],{"data":751,"marks":752,"value":374,"nodeType":242},{},[],{"data":754,"marks":755,"value":29,"nodeType":242},{},[],{"data":757,"content":758,"nodeType":243},{},[759],{"data":760,"marks":761,"value":602,"nodeType":242},{},[],{"data":763,"content":764,"nodeType":257},{},[765,769,779],{"data":766,"marks":767,"value":768,"nodeType":242},{},[],"You can now block ClickFix-style malicious copy and paste attacks using Push. These are one of the ",{"data":770,"content":774,"nodeType":441},{"target":771},{"sys":772},{"id":773,"type":435,"linkType":436},"1u8RJxC00HbBhCBVxcDnkK",[775],{"data":776,"marks":777,"value":778,"nodeType":242},{},[],"fastest-growing",{"data":780,"marks":781,"value":782,"nodeType":242},{},[]," browser-based attacks. You can also choose to collect the payload for your security team to investigate.",{"data":784,"content":785,"nodeType":257},{},[786,790,795,799,804,808,813],{"data":787,"marks":788,"value":789,"nodeType":242},{},[],"From the Push admin console, go to ",{"data":791,"marks":792,"value":794,"nodeType":242},{},[793],{"type":411},"Controls > Malicious copy and paste detection",{"data":796,"marks":797,"value":798,"nodeType":242},{},[],". Then create a configuration rule to select the ",{"data":800,"marks":801,"value":803,"nodeType":242},{},[802],{"type":411},"Mode",{"data":805,"marks":806,"value":807,"nodeType":242},{},[]," and ",{"data":809,"marks":810,"value":812,"nodeType":242},{},[811],{"type":411},"Scope",{"data":814,"marks":815,"value":816,"nodeType":242},{},[],". If you’ve enabled payload collection, Push will collect the malicious payload and include it in the detection event.",{"data":818,"content":819,"nodeType":257},{},[820,823,832],{"data":821,"marks":822,"value":29,"nodeType":242},{},[],{"data":824,"content":828,"nodeType":441},{"target":825},{"sys":826},{"id":827,"type":435,"linkType":436},"7jygmadjoz0asAHv7e5PuK",[829],{"data":830,"marks":831,"value":374,"nodeType":242},{},[],{"data":833,"marks":834,"value":29,"nodeType":242},{},[],{"data":836,"content":837,"nodeType":243},{},[838],{"data":839,"marks":840,"value":612,"nodeType":242},{},[],{"data":842,"content":843,"nodeType":257},{},[844],{"data":845,"marks":846,"value":847,"nodeType":242},{},[],"Customize the look and feel of employee-facing banners and warn or block pages by adding your company logo, accent color, and choice of light or dark mode themes. ",{"data":849,"content":850,"nodeType":257},{},[851,855,860],{"data":852,"marks":853,"value":854,"nodeType":242},{},[],"To add your brand elements, go to ",{"data":856,"marks":857,"value":859,"nodeType":242},{},[858],{"type":411},"Settings > Branding",{"data":861,"marks":862,"value":476,"nodeType":242},{},[],{"data":864,"content":868,"nodeType":483},{"target":865},{"sys":866},{"id":867,"type":435,"linkType":436},"3Jawd7IBSA3GF2XBHARsn",[],{"data":870,"content":871,"nodeType":257},{},[872,875,884],{"data":873,"marks":874,"value":29,"nodeType":242},{},[],{"data":876,"content":880,"nodeType":441},{"target":877},{"sys":878},{"id":879,"type":435,"linkType":436},"4i1KWgBfYqtFYlUFRYiGdW",[881],{"data":882,"marks":883,"value":374,"nodeType":242},{},[],{"data":885,"marks":886,"value":29,"nodeType":242},{},[],{"data":888,"content":889,"nodeType":243},{},[890],{"data":891,"marks":892,"value":622,"nodeType":242},{},[],{"data":894,"content":895,"nodeType":257},{},[896],{"data":897,"marks":898,"value":899,"nodeType":242},{},[],"The Push browser extension can now collect additional metadata and store it locally for up to 30 days, powering more diverse and precise detections, including for emerging threats. ",{"data":901,"content":902,"nodeType":257},{},[903,907,911,915,920],{"data":904,"marks":905,"value":906,"nodeType":242},{},[],"Detections informed by this metadata will be raised on the ",{"data":908,"marks":909,"value":658,"nodeType":242},{},[910],{"type":411},{"data":912,"marks":913,"value":914,"nodeType":242},{},[]," page. Note that these detections do not block end-user activity and are ",{"data":916,"marks":917,"value":919,"nodeType":242},{},[918],{"type":411},"Monitor",{"data":921,"marks":922,"value":923,"nodeType":242},{},[]," mode only.",{"data":925,"content":926,"nodeType":257},{},[927,931,936,940,945],{"data":928,"marks":929,"value":930,"nodeType":242},{},[],"We recommend you enable ",{"data":932,"marks":933,"value":935,"nodeType":242},{},[934],{"type":411},"Browser event storage",{"data":937,"marks":938,"value":939,"nodeType":242},{},[]," to take advantage of this capability. Go to ",{"data":941,"marks":942,"value":944,"nodeType":242},{},[943],{"type":411},"Settings > Telemetry > Browser event storage",{"data":946,"marks":947,"value":948,"nodeType":242},{},[]," in the admin console.",{"data":950,"content":951,"nodeType":257},{},[952,955,964],{"data":953,"marks":954,"value":29,"nodeType":242},{},[],{"data":956,"content":960,"nodeType":441},{"target":957},{"sys":958},{"id":959,"type":435,"linkType":436},"1x69JxXcDWEDIzYXUM8nGb",[961],{"data":962,"marks":963,"value":374,"nodeType":242},{},[],{"data":965,"marks":966,"value":29,"nodeType":242},{},[],{"data":968,"content":969,"nodeType":243},{},[970],{"data":971,"marks":972,"value":973,"nodeType":242},{},[],"And a few other things ...",{"data":975,"content":976,"nodeType":257},{},[977],{"data":978,"marks":979,"value":980,"nodeType":242},{},[],"Other new features or improvements to the platform include:",{"data":982,"content":983,"nodeType":289},{},[984,1004,1014,1034],{"data":985,"content":986,"nodeType":258},{},[987],{"data":988,"content":989,"nodeType":257},{},[990,994,1001],{"data":991,"marks":992,"value":993,"nodeType":242},{},[],"You can now configure the frequency with which app banners will be displayed: either per-tab or per-browser. ",{"data":995,"content":997,"nodeType":375},{"uri":996},"/help/10125#frequency",[998],{"data":999,"marks":1000,"value":374,"nodeType":242},{},[],{"data":1002,"marks":1003,"value":29,"nodeType":242},{},[],{"data":1005,"content":1006,"nodeType":258},{},[1007],{"data":1008,"content":1009,"nodeType":257},{},[1010],{"data":1011,"marks":1012,"value":1013,"nodeType":242},{},[],"You can now define an Owner role as part of Push’s RBAC options. Only Owners can edit roles, delete your team (e.g. tenant), change default SAML roles, or update your team name.",{"data":1015,"content":1016,"nodeType":258},{},[1017],{"data":1018,"content":1019,"nodeType":257},{},[1020,1024,1031],{"data":1021,"marks":1022,"value":1023,"nodeType":242},{},[],"Webhook events now include detection details, for greater context. ",{"data":1025,"content":1027,"nodeType":375},{"uri":1026},"https://pushsecurity.com/help/audience/engineering/webhooks-v1/detections",[1028],{"data":1029,"marks":1030,"value":374,"nodeType":242},{},[],{"data":1032,"marks":1033,"value":29,"nodeType":242},{},[],{"data":1035,"content":1036,"nodeType":258},{},[1037],{"data":1038,"content":1039,"nodeType":257},{},[1040,1044,1051],{"data":1041,"marks":1042,"value":1043,"nodeType":242},{},[],"Push now uses static IP addresses to emit webhook events. These IP addresses are in the same range we previously used, but if you wish to update your network filtering to these new, narrower IP addresses, you can. ",{"data":1045,"content":1047,"nodeType":375},{"uri":1046},"https://pushsecurity.com/help/audience/engineering/webhooks-v1/section/ip-addresses",[1048],{"data":1049,"marks":1050,"value":374,"nodeType":242},{},[],{"data":1052,"marks":1053,"value":29,"nodeType":242},{},[],{"data":1055,"content":1056,"nodeType":257},{},[1057],{"data":1058,"marks":1059,"value":29,"nodeType":242},{},[],"Product release: March 2026","Here’s what’s new on the Push platform for March 2026.","product-release-march-2026",{"items":1064},[1065],{"sys":1066,"name":1068},{"id":1067},"5jk0kqjSdSK2L0YiistQjY","Release notes",{"items":1070},[1071],{"fullName":226,"firstName":227,"jobTitle":228,"profilePicture":1072},{"url":230},"product-release-may-2026","blog/product-release-may-2026",{"json":1076},{"data":1077,"content":1078,"nodeType":523},{},[1079],{"data":1080,"content":1081,"nodeType":257},{},[1082],{"data":1083,"marks":1084,"value":1085,"nodeType":242},{},[],"Custom detections, file download telemetry, and more","Here’s what’s new on the Push platform for May 2026.",{"id":1088,"publishedAt":1089},"4CnX1gLNvcwsbed1q4kTEj","2026-06-01T19:55:35.137Z",{"items":1091},[1092],{"sys":1093,"name":1068},{"id":1067},"Uz1zlDs4QyVPMOE1hzp8eoHuXAuhG-mLzS7ld7bTgeU",1780356502309]