Microsoft Defender for Cloud Apps: Permission changes for select App Governance Entra roles
Microsoft Defender XDR › General
Microsoft 365 roadmap signals
Defender in Message Center
Announcements where the service or title includes Microsoft Defender, presented beside related documentation changes.
20 October 2026
19 October 2026
Security Copilot is now included as part of your Microsoft 365 E5/E7 plan
Microsoft Defender XDR › Architecture and deployment
15 October 2026
Microsoft Defender for Office 365: Localized default mark and notify email template
Microsoft Defender XDR › General
9 October 2026
Microsoft Defender for Office 365: New email submissions data in Advanced Hunting
Microsoft Defender XDR › Hunting and detection
7 October 2026
Microsoft Defender Vulnerability Management: Private preview for selected developer package vulnerability coverage
Microsoft Defender XDR › Vulnerabilities and exposure
Microsoft Defender for Office 365: Post-delivery protection for malicious QR codes in Microsoft Teams
Microsoft Defender XDR › General
2 October 2026
Microsoft Defender for Office 365: Changes to Unified RBAC permission mapping for Microsoft Entra Security Operator role
Microsoft Defender XDR › Email and collaboration
Microsoft Defender for Office 365: Enhancing how we handle promotional mail
Microsoft Defender XDR › Email and collaboration
30 September 2026
Microsoft Defender for Identity auto-activation and auto-auditing automatic enablement
Microsoft Defender XDR › Identity protection
28 September 2026
Microsoft Defender XDR: Detection source support in alert tuning rules
Microsoft Defender XDR › Incidents and response
25 September 2026
Microsoft Defender for Office 365: Teams user reporting enabled by default
Microsoft Defender XDR › General
23 September 2026
Microsoft Defender for Endpoint: Support for Amazon Linux 2 (ARM64) retiring October 31, 2026
Microsoft Defender XDR › Endpoint protection
Case Management in Microsoft Defender
Microsoft Defender XDR › General
Microsoft Defender for Cloud Apps: Retirement of EWS detections in App Governance
Microsoft Defender XDR › General
Microsoft Defender for Endpoint: Update to Linux connectivity requirements with new service URLs to allowlist
Microsoft Defender XDR › Endpoint protection
Microsoft Defender for Office 365: View approver details for remediation actions in Advanced Hunting
Microsoft Defender XDR › Hunting and detection
21 September 2026
Microsoft Defender for Office 365: Remediation actions from the Teams message entity flyout
Microsoft Defender XDR › Email and collaboration
18 September 2026
Microsoft Defender for Office 365: New MessageContents table in Advanced Hunting for Microsoft Teams messages
Microsoft Defender XDR › Hunting and detection
3 September 2026
Microsoft Secure Score: New AI-readiness recommendations for device security
Microsoft Defender XDR › Endpoint protection
2 September 2026
Microsoft Defender for Office 365: Prompt injection protection for email
Microsoft Defender XDR › Email and collaboration
1 September 2026
Microsoft Defender XDR: DLP alerts will be set as behaviors by default
Microsoft Defender XDR › General
28 August 2026
Microsoft Defender: Automated investigation and response (AIR) integrated into antivirus with manual triggering removed
Microsoft Defender XDR › Endpoint protection
26 August 2026
Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator role is being retired
Microsoft Defender XDR › General
25 August 2026
Microsoft Defender XDR: Unified identity timeline on the Identity page
Microsoft Defender XDR › Identity protection
Microsoft Defender XDR: Unified response actions across identity accounts
Microsoft Defender XDR › Identity protection
21 August 2026
Microsoft Edge: Retirement of Windows Information Protection (WIP) and Microsoft Defender Application Guard (MDAG)
Microsoft Defender XDR › Endpoint protection
19 August 2026
Tenant will be auto-enabled into Microsoft Defender Unified RBAC
Microsoft Defender XDR › Identity protection
17 August 2026
Microsoft Purview | Data Security Triage Agent Summaries for DLP Alerts in Microsoft Defender XDR
Microsoft Defender XDR › General
14 August 2026
New Defender for Identity health alert for missing domain controller network traffic
Microsoft Defender XDR › Incidents and response
New Defender for Identity health issue for missing Windows events from a domain controller
Microsoft Defender XDR › Identity protection
13 August 2026
Action required: Update Microsoft Defender for Endpoint Android App
Microsoft Defender XDR › Endpoint protection
6 August 2026
Microsoft Defender for Office 365: AIR Investigation Experience Improvements
Microsoft Defender XDR › General
5 August 2026
Microsoft Teams: Report security concerns in Teams meetings
Microsoft Defender XDR › General
Microsoft Teams: Users can report security concerns in group calls
Microsoft Defender XDR › General
29 July 2026
Action Required: Defer Upgrade to Microsoft Defender for Endpoint on Linux Build 101.26052.0009
Microsoft Defender XDR › Endpoint protection
27 July 2026
MDO Encrypted email attachment protection
Microsoft Defender XDR › Email and collaboration
24 July 2026
Microsoft Purview | Insider Risk Management triage agent summaries available in Microsoft Defender
Microsoft Defender XDR › General
7 July 2026
Upcoming change to Microsoft Defender for Endpoint Advanced Hunting: removal of SMB signature data
Microsoft Defender XDR › Hunting and detection
23 June 2026
Microsoft Defender for Cloud Apps: Improvements to threat protection capabilities
Microsoft Defender XDR › General
22 June 2026
2026 Microsoft 365 Packaging Update
Microsoft Defender XDR › Email and collaboration
9 June 2026
Microsoft Secure Score: New recommendation to reduce inbound internet exposure
Microsoft Defender XDR › Vulnerabilities and exposure
5 June 2026
Microsoft Defender XDR: Retirement of in-app OS update notifications in Defender for Endpoint (iOS)
Microsoft Defender XDR › Endpoint protection
Microsoft Defender for Endpoint security updates move to Microsoft Update on Windows
Microsoft Defender XDR › Endpoint protection
27 May 2026
Microsoft Defender XDR: Password protection account action buttons
Microsoft Defender XDR › Identity protection
26 May 2026
Microsoft Defender for Office 365: ZAP expands cleanup to Deleted Items
Microsoft Defender XDR › Email and collaboration
13 May 2026
Microsoft Purview | Data Loss Prevention - Enrich Defender alerts Graph API with DLP event data
Microsoft Defender XDR › Developer and API
27 April 2026
Assess Secure Boot certificate status with Microsoft Defender
Microsoft Defender XDR › Vulnerabilities and exposure
Microsoft Secure Score: New recommendation for Secure Boot 2023 certificate readiness in Microsoft Defender for Endpoint
Microsoft Defender XDR › Endpoint protection
15 April 2026
Planned breaking changes to ASIM KQL functions used by Microsoft Sentinel for Developers
Microsoft Defender XDR › Hunting and detection
10 April 2026
Upcoming retirement of older Microsoft Defender for Endpoint mobile app versions (iOS and Android)
Microsoft Defender XDR › Endpoint protection
2 April 2026
Microsoft Defender XDR: Email summary powered by Security Copilot on the email entity page
Microsoft Defender XDR › General
31 March 2026
Microsoft Secure Score: New recommendation for Microsoft Defender for Endpoint
Microsoft Defender XDR › Vulnerabilities and exposure
25 March 2026
Notice: Security Copilot will be included as part of your Microsoft 365 E5 plan soon
Microsoft Defender XDR › Architecture and deployment
17 March 2026
Upcoming retirement of select threat detections in Microsoft Defender for Cloud Apps
Microsoft Defender XDR › Identity protection
13 March 2026
Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint
Microsoft Defender XDR › Vulnerabilities and exposure
6 March 2026
Advanced Hunting: new actions to block attachments and top-level URL domains
Microsoft Defender XDR › Hunting and detection
5 March 2026
Microsoft Defender for iOS: End of support for iOS 16 devices
Microsoft Defender XDR › Endpoint protection
26 February 2026
Defender for Office 365 URL click alerts now include Microsoft Teams
Microsoft Defender XDR › General
18 February 2026
Retirement of “Suspected identity theft (pass-the-ticket)” classic alert
Microsoft Defender XDR › Incidents and response
Microsoft Defender for Office 365: Enhancing the quarantine email preview experience
Microsoft Defender XDR › Email and collaboration
March 2026 Secure Score category update
Microsoft Defender XDR › Vulnerabilities and exposure
13 February 2026
Microsoft Defender Antivirus: Change to exclusion storage when using MDE security settings management
Microsoft Defender XDR › Endpoint protection
Microsoft Defender for Office 365: Enable users to report suspicious Teams messages in Plan 1
Microsoft Defender XDR › Architecture and deployment
6 February 2026
(Public Preview) New built in alert tuning rules for Microsoft Defender for Endpoint in Microsoft Defender XDR
Microsoft Defender XDR › Incidents and response
29 January 2026
Microsoft Teams: Report a suspicious call
Microsoft Defender XDR › General
28 January 2026
Microsoft Defender for Android: End of support for Android 10 devices
Microsoft Defender XDR › Endpoint protection
Retirement notice: MDE and XDR Advanced Hunting APIs retiring; migrate to Microsoft Graph Security API
Microsoft Defender XDR › Hunting and detection
New Built-in Alert Tuning Rules optimize your incident and alert queues
Microsoft Defender XDR › Incidents and response
24 January 2026
Microsoft Defender for Office 365: Admins can block external users in Microsoft Teams from Defender Portal
Microsoft Defender XDR › General
23 January 2026
Microsoft Defender for Android ending support for enrolled personal profiles
Microsoft Defender XDR › Identity protection
14 January 2026
Endpoint DLP-sensitive data alerting retiring in Defender; use Purview DLP
Microsoft Defender XDR › Endpoint protection
Microsoft Defender for Cloud Apps – Improvements to Microsoft 365 connector configuration page
Microsoft Defender XDR › Developer and API
9 January 2026
Microsoft Defender for Office 365: Enhancing the quarantine experience for administrators
Microsoft Defender XDR › Email and collaboration
6 January 2026
Automatic Windows event auditing configuration availability for unified sensors (V3.x)
Microsoft Defender XDR › Identity protection