Daily Defender News2 changes were tracked across 1 Microsoft Defender products. The leading updates include Microsoft Defender Vulnerability Management: Private preview for selected developer package vulnerability coverage; Microsoft Defender for Office 365: Post-delivery protection for malicious QR codes in Microsoft Teams.
Microsoft Defender for Office 365 extends Teams URL protection to detect malicious URLs in QR codes post-delivery, warning users and enabling security teams to investigate via Advanced Hunting. Rolling out worldwide from October to November 2026, no user action is required, but admins should review related settings and processes.
Microsoft Defender Vulnerability Management is privately previewing expanded vulnerability coverage for selected Node.js, Python, and Java packages on Windows devices. It integrates with existing workflows, APIs, and exports, with rollout planned from September to December 2026. Organizations should prepare for increased data volume and validate integrations before enabling.
