Daily Defender News
A cross-product view of Microsoft Defender changes related to General.
Microsoft Defender for Office 365 will localize the default "Mark and notify" email template based on users' Outlook language settings, improving clarity in user-reported message notifications. Rollout starts June 2026 worldwide, completing by September 2026. No action is required; admins may inform users and review settings.
Microsoft Purview introduces AI-generated summaries and categorizations for DLP alerts within Microsoft Defender XDR, aiding security analysts in triage. The Data Security Triage Agent can be deployed from Defender XDR, with management in Purview. Rollout starts April 2026 (preview) and August 2027 (GA). Existing policies remain unchanged.
Microsoft Defender for Office 365's AIR experience will add a manual refresh button, replacing auto-refresh, and simplify investigation names by removing email subjects and UPNs. These changes improve performance, reduce network activity, and support data minimization. No admin action is required, but workflow updates are recommended.
Microsoft Teams will introduce a "Report a meeting" feature starting August 2026, allowing users to report suspicious or malicious activity during meetings. Reports help security teams investigate threats via Microsoft Defender and Teams admin center. The feature is enabled by default, with administrative controls and data collection for security investigations.
Microsoft Teams will introduce a "Report a call" feature for group calls, allowing users to report suspicious calls from call history. Administrators can review reports in Teams admin center and Microsoft Defender. The feature rolls out from August to October 2026 and is enabled by default.
Microsoft Purview Insider Risk Management triage agent summaries will appear in Microsoft Defender alerts, providing AI-generated insights to streamline investigations. This feature rolls out from mid-August to December 2026, enabling easier alert review without changing existing configurations. No action is needed if prerequisites are met.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Added Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-risk-assessment.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-365-defender.md.
Updated Microsoft Defender documentation in defender/threat-intelligence/learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-in-microsoft-365-defender.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/trial-user-guide-defender-vulnerability-management.md.
Updated Microsoft Defender documentation in defender-xdr/create-custom-rbac-roles.md.
Updated Microsoft Defender documentation in defender-xdr/activate-defender-rbac.md.
Updated Microsoft Defender documentation in defender-xdr/compare-rbac-roles.md.
Updated Microsoft Defender documentation in defender-xdr/custom-permissions-details.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
Removed Microsoft Defender documentation in defender-xdr/additional-information-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-autoir-report-false-positives-negatives.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Removed Microsoft Defender documentation in defender-xdr/before-you-begin-defender-experts.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-prerequisites.md.
Removed Microsoft Defender documentation in defender-xdr/before-you-begin-xdr.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/billing.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-hunting-ask-experts.md.
Removed Microsoft Defender documentation in defender-xdr/communicate-defender-experts-xdr.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-communication.md.
Updated Microsoft Defender documentation in defender-xdr/compare-rbac-roles.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/how-to-configure-micro-agent-twin.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/how-to-threadx-security-module.md.
Updated Microsoft Defender documentation in defender-xdr/configure-asset-rules.md.
Updated Microsoft Defender documentation in defender-xdr/configure-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-configure-auto-investigation-response.md.
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Updated Microsoft Defender documentation in defender-xdr/configure-event-hub.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/configure-pam-to-audit-sign-in-events.md.
Updated Microsoft Defender documentation in defender-xdr/configure-siem-defender.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-teams-app-permissions.md.
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Updated Microsoft Defender documentation in defender-xdr/contact-defender-support.md.
Updated Microsoft Defender documentation in defender-xdr/copilot-in-defender-device-summary.md.
Updated Microsoft Defender documentation in defender-xdr/copilot-in-defender-file-analysis.md.
Updated Microsoft Defender documentation in easm/policy-engine.md.
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/quickstart-create-custom-alerts.md.
Updated Microsoft Defender documentation in defender-xdr/create-custom-rbac-roles.md.
Updated Microsoft Defender documentation in defender-xdr/create-dsi-in-defender.md.
Updated Microsoft Defender documentation in defender-xdr/custom-roles.md.
Updated Microsoft Defender documentation in defender-xdr/split-incidents-into-tasks.md.
Removed Microsoft Defender documentation in defender-xdr/defender-experts-managed-security-guide.md.
Removed Microsoft Defender documentation in defender-xdr/defender-experts-report.md.
Removed Microsoft Defender documentation in defender-xdr/defender-experts-scoped-coverage.md.
Updated Microsoft Defender documentation in defender-xdr/defender-xdr-custom-reports.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/device-inventory.md.
Removed Microsoft Defender documentation in defender-xdr/dex-xdr-permissions.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-disruptionandresponseevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/dlp-investigate-alerts-defender.md.
Updated Microsoft Defender documentation in defender-xdr/dlp-investigate-alerts-sentinel.md.
Updated Microsoft Defender documentation in easm/domain-asset-filters.md.
Updated Microsoft Defender documentation in defender-xdr/dynamic-threat-detection-agent.md.
Updated Microsoft Defender documentation in defender-xdr/edit-delete-rbac-roles.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-emailattachmentinfo-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-emailevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-emailpostdeliveryevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-emailurlinfo-table.md.
Added Microsoft Defender documentation in defender-xdr/security-for-ai/get-started-defender-security-for-ai.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/recommendations.md.
Updated Microsoft Defender documentation in defender-xdr/entity-page-device.md.
Updated Microsoft Defender documentation in defender-xdr/exclude-analytics-rules-correlation.md.
Removed Microsoft Defender documentation in defender-xdr/experts-on-demand.md.
Removed Microsoft Defender documentation in defender-xdr/faq-cloud-coverage-defender-experts.md.
Removed Microsoft Defender documentation in defender-xdr/faq-managed-response.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-faq.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-faq-managed-response.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
Removed Microsoft Defender documentation in defender-xdr/frequently-asked-questions.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-response-actions-notifications.md.
Updated Microsoft Defender documentation in defender-xdr/security-summary-report.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-permissions.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-auditing.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-start-using.md.
Updated Microsoft Defender documentation in defender-xdr/import-rbac-roles.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-considerations.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/how-to-install-micro-agent-for-edge.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/tutorial-servicenow.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/tutorial-splunk.md.
Updated Microsoft Defender documentation in defender-xdr/investigate-alerts.md.
Updated Microsoft Defender documentation in defender-xdr/alert-classification-malicious-exchange-connectors.md.
Updated Microsoft Defender documentation in defender-xdr/pilot-deploy-investigate-respond.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/how-to-investigate-cis-benchmark.md.
Updated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-autoir-results.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-remediation-actions.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/how-to-manage-device-inventory-on-the-cloud.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-subscriptions.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/manage-subscriptions-enterprise.md.
Updated Microsoft Defender documentation in unified-secops-platform/mto-cross-cloud.md.
Updated Microsoft Defender documentation in unified-secops-platform/mto-urbac.md.
Updated Microsoft Defender documentation in defender-for-iot/manage-license.md.
Removed Microsoft Defender documentation in defender-xdr/managed-detection-and-response-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/merge-incidents-manually.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-managed-response.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-reports.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/edge-security-module-deprecation.md.
Updated Microsoft Defender documentation in defender-for-iot/microsoft-defender-iot.md.
Updated Microsoft Defender documentation in defender-xdr/usgov.md.
Updated Microsoft Defender documentation in defender-xdr/phishing-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-xdr-auditing.md.
Updated Microsoft Defender documentation in easm/modifying-inventory-assets.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/how-to-region-move.md.
