Daily Defender News
Aboutmerill.net
Microsoft Defender for Endpoint
Endpoint protection

Whats New In Microsoft Defender Endpoint

15 October 2026Generally available+8 / −3 lines

In brief

The October 2026 entry replaces the previous Preview listing for vulnerability assessment of applications installed via the Microsoft Store, including Microsoft Teams.

What Defender admins need to know

Administrators can use the documented capability to monitor vulnerabilities in Microsoft Store applications. No action is stated.

Summaries are generated from the documentation change itself.

Documentation change

View full page diffView on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

ms.topic: whats-new ms.service: defender-endpoint author: lwainstein ms.author: lwainsteinyaronyahav ms.reviewer: noamhadash, pahuijbr, yongrhee ms.localizationpriority: medium ms.date: 2026-09-16T00:10-14T00:00:00.0000000Z ai-usage: ai-assisted ms.collection:

  • m365-security

Learn more about Preview features.

October 2026

TypeFeaturePreview/GADescription
FeatureVulnerability assessment for Microsoft Store applicationsGAVulnerability assessment for applications installed via the Microsoft Store is now generally available. Defender Vulnerability Management detects supported Microsoft Store applications, adds them to the software inventory, and assesses them for vulnerabilities. Coverage is currently limited to a select set of commonly used applications. Use the Software evidence area on the software page to view the file path for the vulnerable application, along with a suggested query showing the vulnerable app, version, and file location.

September 2026

| Type | Feature | Preview/GA | Description | | Feature | Antivirus audit mode for Linux | Preview | Provides real-time malware detection and alerting without automatically quarantining files or terminating processes. This enables organizations to evaluate Defender detection efficacy and performance on sensitive workloads before enabling enforcement.Available in Microsoft Defender for Endpoint on Linux version 101.26062.0007 or later. | | Feature | Offboarding API support for Linux | GA | Enables organizations to automate the offboarding of Linux servers from Microsoft Defender for Endpoint through the Offboard machine API, simplifying device lifecycle management at scale.Available in Microsoft Defender for Endpoint on Linux version 101.26062.0007 or later. | | Release - macOS | Build 101.26062.0012 | GA | Release version 20.126062.12.0 released: See enhancements and features for this release. | | Feature | Vulnerability assessment for Microsoft Store applications | Preview | You can now monitor vulnerabilities on devices running Microsoft Store applications, including Microsoft Teams, Mozilla Firefox, WhatsApp, Slack, Dropbox, DuckDuckGo, Dell Command | Update, HP Smart, NVIDIA Control Panel, 1Password, Beyond Compare, and Evernote (see Microsoft Store applications for the full list). Use the Software evidence area in the software page to view the file path for the vulnerable application, along with a suggested query showing the vulnerable app, version, and file location. | | Release - macOS | Build 101.26062.0011 | GA | Release version 20.126062.11.0 released: See enhancements and features for this release. |

July 2026