ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Defender

Everything ChangeIntel collected about Defender from 35 sources, on one timeline.

RSS

Nothing about Defender needs action right now

Defender timeline

8 weeks back, 9 ahead · marks show importance · counts use first-seen records
  • Release or post
  • Known issue
  • Out-of-band, exploited, or incident
  • Revised by its source
  • Deadline
Releases & versionsKBs · versions · tool releases
1 changeRoutine only
SecurityMSRC · CISA KEV · security news
1 changeRoutine only
Issues & breaking changesKnown issues · breaking changes · incidents
Nothing new
RoadmapMicrosoft 365 roadmap
1 changeRoutine only
News & announcementsBlogs · what's new pages
170 changes14 worth a look
Dates & retirementsLifecycle · retirement notices
Nothing newNext: Wed 6 Jan
Message CenterMicrosoft 365 admin notices
37 changesNext: Wed 2 Dec

Latest changes

Newest first

Every change about Defender is in the change stream.

Also mentioned in

17Not counted as Defender changes

5 older records name Defender too; search finds them.

Threads

Related changes across sources
  1. October 2026 Patch Tuesday Published vulnerability: Microsoft Defender Information Disclosure Vulnerability2 about Defender, in a thread of 1494 changes Follow evidence and connection reasons
  2. November 2026 Patch Tuesday Published vulnerability: Microsoft Defender Remote Code Execution Vulnerability1 about Defender, in a thread of 1105 changes Follow evidence and connection reasons
  3. MC1462464: Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator role is being retired Message Center · Plan for change1 about Defender, in a thread of 2 changes Follow evidence and connection reasons
  4. Microsoft Purview: Data Loss Prevention - Data Security Triage Agent summaries and categorizations for DLP alerts will be made available in DLP Alerts in Microsoft Defender XDR Notice updated: MC1255406: (Updated) Microsoft Purview | Data Security Triage Agent Summaries for DLP Alerts in Microsoft Defender XDR1 about Defender, in a thread of 2 changes Follow evidence and connection reasons

Revised by Microsoft

6464 with a status or version change
ItemWhat changedNoticed
MC1387578: (Updated) Microsoft Defender for Office 365: Localized default mark and notify email template Microsoft 365 Message Center Archive by Merill Fernando Microsoft Defender XDRNotice updated12 Nov
Defender for Office 365 preset security policies 1 edited passage (34 words changed). The changed wording mentions permissions, settings and controls, references. Review the source to confirm the effect.Guidance changed10 Nov
Defender unified RBAC permissions 1 edited passage (212 words changed). The changed wording mentions prerequisites, permissions, supported platforms. Review the source to confirm the effect.Guidance changed10 Nov
MC1523084: (Updated) Microsoft Defender for Office 365: Move email messages to quarantine with a new remediation action Microsoft 365 Message Center Archive by Merill Fernando Microsoft Defender XDRNotice updated5 Nov
Defender for Endpoint changes 2 new passages (about 20 words). The changed wording mentions dates and deadlines, references. Review the source to confirm the effect.Guidance changed4 Nov
Defender for Endpoint changes 1 edited passage (71 words changed). The changed wording mentions prerequisites, supported platforms, network endpoints, references. Review the source to confirm the effect.Guidance changed3 Nov
MC1486293: Microsoft Defender for Office 365: Changes to Unified RBAC permission mapping for Microsoft Entra Security Operator role Microsoft 365 Message Center Archive by Merill Fernando Microsoft Defender XDRNotice updated3 Nov
Defender unified role-based access control 1 removed passage (12 words). No rule matched the changed words; review the source for its effect.Guidance changed2 Nov

56 more revised items are on the timeline.

ChangeIntel compares its own snapshots, so the date is when it noticed the change; Microsoft may have made it earlier.

Notices and feature states

3 entries · all undated

Microsoft's current catalogs. Undated entries are not new announcements; preview and availability labels follow the source. Changes are dated when ChangeIntel observes a revision.

Guidance

32 monitored pages

About this page

35 sources

Watching for changes since 26 Sep 2026. Revisions Microsoft made before then were not observed, which does not mean there were none.

Nothing about Defender yet in: open known issues.

A change belongs to Defender when it comes from a source about the product or one of its names (Defender, Microsoft Defender, Defender XDR, Microsoft Defender XDR), when a roadmap entry, Windows release, or known issue lists it, or when an MSRC CVE, CISA entry, or lifecycle date names it. Another product's notes and community posts that only mention Defender are listed under "Also mentioned in" and are not counted as its changes. Sources marked quiet are about Defender alone and have had nothing new for 30 days; check the source before reading silence as "no change".

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 14:14 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.