Microsoft Defender for Endpoint Updates & Release Notes

Name: Microsoft Defender for Endpoint
Brand: Microsoft

Follow Microsoft Defender for Endpoint to add their release notes to your feed!

14 updates curated from 1 source by the Releasebot Team. Last updated: Jul 20, 2026

Get this feed:

July 2026
Date parsed from source:
Jul 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Release - iOS

Microsoft Defender for Endpoint releases version 1.1.78290102 with enhancements and new features.

Release version 1.1.78290102 released: See enhancements and features for this release.
Original source
July 2026
Date parsed from source:
Jul 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

AI agent runtime protection updates

Microsoft Defender for Endpoint expands AI agent runtime protection for Codex CLI, GitHub Copilot, and Node.js Claw agents.
AI agent runtime protection includes these enhancements:

Vendor-supported agent event interfaces now work with standard platform and engine update channels, so no Beta channel configuration is required. Agent-native event inspection now supports Codex CLI and the GitHub Copilot app.

Network inspection is now supported for agents that don't expose vendor-supported event interfaces, including OpenClaw and similar Node.js-based Claw agents. For more information, see AI agent runtime protection with Microsoft Defender for Endpoint.

Original source
All of your release notes in one feed

Join Releasebot and get updates from Microsoft and hundreds of other software products.

Create account
Get updates with:
July 2026
Date parsed from source:
Jul 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Release - macOS

Microsoft Defender for Endpoint releases version 20.126052.16.0 with enhancements and new features.

Release version 20.126052.16.0 released: See enhancements and features for this release.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Release - Android

Microsoft Defender for Endpoint releases version 1.0.9029.0101 with new enhancements and features.

Release version 1.0.9029.0101 released: See enhancements and features for this release.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Release - macOS

Microsoft Defender for Endpoint releases version 20.126042.20.0 with enhancements and features.

Release version 20.126042.20.0 released: See enhancements and features for this release.
Original source
Similar to Microsoft Defender for Endpoint with recent updates:
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Local AI agent discovery — macOS support and new agents

Microsoft Defender for Endpoint expands Local AI agent discovery to macOS and adds support for new AI agents.

Local AI agent discovery now supports macOS endpoints in addition to Windows.

This update also adds discovery support for new agents including Junie CLI, Kiro CLI, Warp, Hermes Agent, Goose Desktop, Perplexity Desktop, Kiro IDE, Devin Desktop (formerly Windsurf), and QClaw.

For more information, see Local AI agent discovery.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Enhanced Defender deployment tool for Windows

Microsoft Defender for Endpoint adds streamlined onboarding and stronger package security, bundling the onboarding package into the executable, generating deployment keys, and supporting package expiry dates. It also lets users download .exe or .zip files and manage them from a new Deployment packages page.
The new version of the tool streamlines onboarding and enhances security by:

Bundling the onboarding package directly into the tool's executable.

Generating a key during deployment package creation that is required for running the tool.

Enabling users to configure an expiry date for the package to reduce the risk of unauthorized use.

In addition:

You have the option of downloading the package as either an .exe or a .zip file, whichever best suits your organization's needs.

A new Deployment packages page in the Defender portal facilitates management of downloaded packages by providing centralized visibility into all the packages and their current status.

Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Selective Response Actions

Microsoft Defender for Endpoint adds Selective Response Actions for tailored onboarding protection on Tier-0 and high-value devices.

Selective Response Actions enables organizations to tailor high-impact security operations on devices during onboarding. It provides precise control over how response actions are applied on Tier-0 systems and other high-value assets, helping maintain operational stability while delivering strong protection.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Enhanced exposure score in Defender Vulnerability Management

Microsoft Defender for Endpoint adds a generally available exposure score model that improves risk prioritization and recommendation accuracy.

The new exposure score model in Defender Vulnerability Management is now generally available. This model improves risk prioritization and recommendation impact accuracy by incorporating exploit prediction data (EPSS) and asset context factors such as internet-facing status and criticality. For more information, see Exposure score in Defender Vulnerability Management and Security recommendations.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Release - Windows

Microsoft Defender for Endpoint highlights enhancements and features for this release.

See enhancements and features for this release.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

New Microsoft Secure Score recommendation

Microsoft Defender for Endpoint adds a Microsoft Secure Score recommendation to reduce unnecessary inbound internet exposure on internet-facing devices, giving teams centralized visibility to spot public-facing devices, confirm expected exposure, prioritize remediation, and shrink external attack surface.

Microsoft Secure Score now includes the Reduce unnecessary inbound internet exposure on internet-facing devices recommendation, which helps identify devices that are accessible from the public internet and may represent unnecessary attack surface.

Internet-facing devices are primary entry points for attackers and automated scanners, making them prime targets for credential brute-forcing, exploitation of unpatched vulnerabilities, and initial access for ransomware and hands-on-keyboard intrusions.

This recommendation provides centralized visibility into internet-facing devices across the environment, enabling organizations to validate whether exposure is expected, prioritize remediation for unintended exposure, and reduce external attack surface at scale.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Local AI agent discovery

Microsoft Defender for Endpoint now automatically discovers local AI agents on Windows devices for better inventory and hunting visibility.

Microsoft Defender for Endpoint now automatically discovers supported local AI agents running on onboarded Windows devices — including coding agents and IDE extensions, desktop AI assistants, local AI runtimes, and agent platforms. Discovered agents appear as assets in the AI agent inventory, exposure map, and advanced hunting, giving security teams visibility into local AI agent usage across the organization.

For more information, see Discover local AI agents.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Local AI agent runtime protection

Microsoft Defender for Endpoint adds public preview runtime protection for local AI agents on Windows endpoints.

Runtime protection for supported local AI agents on Windows endpoints is now available in public preview. Microsoft Defender inspects the agent loop (user prompts, tool calls, and tool responses) and can block risky activity before it executes, helping stop prompt injection and unsafe agent actions at the device level. Blocked and audited events appear as alerts in Microsoft Defender to support incident correlation and investigation workflows. For more information, see Set up AI agent runtime protection.
Original source
June 2026
Date parsed from source:
Jun 1, 2026

First seen by Releasebot:
Jul 20, 2026
Microsoft Defender for Endpoint by Microsoft

Release - Linux

Microsoft Defender for Endpoint ships release version 30.126042.0009.0 with considerations and updates.

Release version 30.126042.0009.0 - see considerations and updates for this release.
Original source