Microsoft Defender Antivirus security intelligence April-2025

[harlan4096]

April-2025 (Platform: TBD | Engine: 1.1.25040.1)

• Security intelligence update version: 1.429.3.0
  
• Release date: May 14, 2025 (Engine) / (Platform pending)
  
• Platform: (coming soon)
  
• Engine: 1.1.25040.1
  
• Support phase: Security and Critical Updates
  

What's new​

• Fixed TVM Block where we failed to block a trusted file
  
• Fixed Microsoft Defender platform update timestamp to reflect the actual update time.
  
• The 1002 event (An anti-malware scan was stopped before it finished) now includes details of the stop reason.
  
• Added more details to the 1000 event (Scan started), like scan trigger and scan on idle.
  
• Improved ASR file processing to correctly handle "allow" Indicators of Compromise (IoCs).
  
• Improvement in health reporting for machines that are rebooted or hibernated.
  
• Improved performance for Smart App Control (SAC) trusted file handling.
  
• Improved device control logic for offline printers.
  

Microsoft Defender Antivirus security intelligence and product updates - Microsoft Defender for Endpoint