Microsoft Defender Antivirus security intelligence and product updates

[harlan4096]

Microsoft Defender Antivirus security intelligence and product updates - Microsoft Defender for Endpoint

June-2024 (Platform: 4.18.24060.xxxx | Engine: 1.1.24060.5)​

• Security intelligence update version: 1.415.1.0
  
• Release date: July 9, 2024 (Engine) / TBD (Platform)
  
• Platform: 4.18.24060.xxxx
  
• Engine: 1.1.24060.5
  
• Support phase: Security and Critical Updates
  

What's new​

• Fixed issue where Microsoft Defender Antivirus was not properly changing state when non-Microsoft antivirus/antimalware software was installed and Windows Defender Application Control (WDAC) with Intelligent Security Graph were enabled.
  
• Fixed deadlock issue on VDI that occurred when loading corrupted update files from UNC share.
  
• Custom scans started with Start-MpScan are now reported in the event log.
  
• Fixed potential deadlock that occurred on volume mount scanning.
  
• Fixed issue where Microsoft Defender Antivirus did not allow applications to clean up temporary files.
  
• Fixed potentially packet loss due to network protection shutdown that could lead to deadlock.
  
• Implemented performance improvements for scenarios where WDAC is enabled with Intelligent Security Graph.
  
• Fixed an issue where an Outlook exclusion for the ASR rule Block Office applications from injecting code into other processes was not honored.
  

[harlan4096]

September-2024 (Platform: 4.18.24090.11 | Engine 1.1.24090.11)​

• Security intelligence update version: 1.421.12.0
  
• Release date: October 30, 2024 (Engine and Platform)
  
• Platform: 4.18.24090.11
  
• Engine: 1.1.24090.11
  
• Support phase: Security and Critical Updates
  

What's new​

• Improved detection logic to reduce false positives related to the ASR rule, Block Office applications from injecting code into other processes
  
• Resolved an issue that could lead to a Windows device to be marked as non-compliant in Intune when Microsoft Defender Antivirus starts.
  
• Resolved an issue with catchup scan configuration, where the DaysUntilAggressiveCatchupQuickScan policy setting was not honored.
  
• Fixed SharedSignatureRoot processing when an empty value was set.
  
• Fixed a problem with device control where certain file systems (like FAT, FAT32, exFAT) with volume information displayed when a blocking rule was defined.
  
• Improved performance in specific scenarios where network files were accessed.
  
• Fixed an issue with Azure Virtual Desktop where the Intune policy was not being honored.
  
• Fixed potential deadlock for custom detection rules on the Windows client
  
• Resolved an issue where antivirus exclusions were not being honored with AMSI.
  
• Fixed issue impacting a subset of devices where antivirus exclusions configured through SCCM were not honored
  

Microsoft Defender Antivirus security intelligence and product updates - Microsoft Defender for Endpoint