Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Day in brief
Risk evaluation framework changelog leads 76 Defender updates
27 May 2026 recorded 3 new, 71 updated, 1 removed Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Endpoint, Defender XDR, Office 365.
- Risk evaluation framework changelog
Exposure Management · Vulnerabilities and exposureAdded Microsoft Defender documentation in exposure-management/risk-evaluation-changelog.md.
- Siem Migration
Sentinel · Cloud and workloadsUpdated Microsoft Defender documentation in sentinel/siem-migration.md.
- Detect, block, and investigate threats to AI agents using Microsoft Defender (Preview)
Defender XDR · GeneralUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
- Fixed Reported Inaccuracies
Vulnerability Management · GeneralUpdated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
- Migrate To Sensor V3
Identity · Identity protectionUpdated Microsoft Defender documentation in defender-for-identity/deploy/migrate-to-sensor-v3.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
76 updates
Microsoft Defender XDR
10 updatesUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Defender Security For Ai
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/defender-security-for-ai.md.
Updated Microsoft Defender documentation in defender-xdr/onboarding-defender-experts-for-hunting.md.
Updated Microsoft Defender documentation in defender-xdr/onboarding-defender-experts-for-hunting.md.
Microsoft Defender XDR adds "Disable account" and "Reset password" buttons to the Password protection page for Active Directory human user accounts. Available by default from late May 2026, these actions enable direct remediation of risky accounts without configuration changes. No action is required from administrators.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Microsoft Defender for Endpoint
40 updates
Updated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Updated Microsoft Defender documentation in defender-endpoint/ai-agent-runtime-protection-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/ai-agent-runtime-protection-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Updated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Added Microsoft Defender documentation in defender-endpoint/guidance-pen-testing-bas-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/guidance-for-pen-testing-and-bas-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-ai-agent-runtime-protection.md.
Updated Microsoft Defender documentation in defender-endpoint/guidance-pen-testing-bas-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-ai-agent-runtime-protection.md.
Updated Microsoft Defender documentation in defender-endpoint/ai-agent-runtime-protection-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/ai-agent-runtime-protection-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/guidance-pen-testing-bas-linux.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-ai-agent-runtime-protection.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint.md.
Data Storage Privacy
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/data-storage-privacy.md.
Discover Local Ai Agents
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Endpoint Detection Response
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/overview-endpoint-detection-response.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/guidance-pen-testing-bas-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/guidance-pen-testing-bas-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/guidance-pen-testing-bas-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-mac.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Removed Microsoft Defender documentation in defender-endpoint/guidance-for-pen-testing-and-bas-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-windows.md.
Microsoft Defender Endpoint
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/onboard-downlevel.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-linux.md.
Microsoft Defender for Office 365
9 updates
Updated Microsoft Defender documentation in defender-office-365/email-authentication-spf-configure.md.
Submissions Teams
UpdatedUpdated Microsoft Defender documentation in defender-office-365/submissions-teams.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-report-messages-files-to-microsoft.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-quick-configure.md.
Submissions Admin
UpdatedUpdated Microsoft Defender documentation in defender-office-365/submissions-admin.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-user-reported-messages-custom-mailbox.md.
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-sending-limits-troubleshoot.md.
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-sending-limits-troubleshoot.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/reducing-attack-surface-in-microsoft-teams.md.
Microsoft Defender for Identity
3 updatesMigrate To Sensor V3
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/migrate-to-sensor-v3.md.
Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/deploy-sensor-v3.md.
Microsoft Sentinel
2 updatesSiem Migration
UpdatedUpdated Microsoft Defender documentation in sentinel/siem-migration.md.
Billing
UpdatedUpdated Microsoft Defender documentation in sentinel/billing.md.
Added Microsoft Defender documentation in exposure-management/risk-evaluation-changelog.md.
Updated Microsoft Defender documentation in exposure-management/risk-evaluation-changelog.md.
Risk Evaluation Changelog
UpdatedUpdated Microsoft Defender documentation in exposure-management/risk-evaluation-changelog.md.
Fixed Reported Inaccuracies
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
Microsoft Unified SecOps Platform
8 updatesAdded Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Overview
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Mto Overview
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.