Microsoft Defender XDR Message Center Updates

All 58 Microsoft 365 Message Center announcements for Microsoft Defender XDR.

All Microsoft 365 services

• MC1552387: Retired: Microsoft Defender for Identity classic alerts (Remote code execution attempt and pass-the-hash)
• MC1387578: Microsoft Defender for Office 365: Localized default mark and notify email template
• MC1546447: Microsoft Defender for Office 365: Updated recipient inclusion logic for threat protection policies
• MC1523084: Microsoft Defender for Office 365: Move email messages to quarantine with a new remediation action
• MC1537494: Attention needed: Your tenant will be auto enabled for the new Microsoft Defender RBAC model
• MC1536045: Microsoft Defender: Expanded URBAC permission support for email content access
• MC1532241: Microsoft Defender XDR: Investigate suspicious Microsoft Teams calls and meetings with advanced hunting
• MC1484009: Microsoft Defender for Office 365: New email submissions data in Advanced Hunting
• MC1474106: Microsoft Defender for Office 365: New MessageContents table in Advanced Hunting for Microsoft Teams messages
• MC1220762: Retirement notice: MDE and XDR Advanced Hunting APIs retiring; migrate to Microsoft Graph Security API
• MC1479503: Microsoft Defender for Cloud Apps: Permission changes for select App Governance Entra roles
• MC1478465: Security Copilot is now included as part of your Microsoft 365 E5/E7 plan
• MC1490909: Microsoft Defender Vulnerability Management: Private preview for selected developer package vulnerability coverage
• MC1490905: Microsoft Defender for Office 365: Post-delivery protection for malicious QR codes in Microsoft Teams
• MC1279093: Microsoft Defender for Office 365: Enhancing how we handle promotional mail
• MC1481318: Microsoft Defender XDR: Detection source support in alert tuning rules
• MC1478463: Microsoft Defender for Office 365: Teams user reporting enabled by default
• MC1392568: Microsoft Defender for Endpoint: Support for Amazon Linux 2 (ARM64) retiring October 31, 2026
• MC1388718: Microsoft Defender for Endpoint: Update to Linux connectivity requirements with new service URLs to allowlist
• MC1478005: Microsoft Defender for Office 365: View approver details for remediation actions in Advanced Hunting
• MC1477993: Case Management in Microsoft Defender
• MC1476237: Microsoft Defender for Office 365: Remediation actions from the Teams message entity flyout
• MC1466750: Microsoft Secure Score: New AI-readiness recommendations for device security
• MC1422060: Microsoft Defender for Office 365: Prompt injection protection for email
• MC1465771: Microsoft Defender XDR: DLP alerts will be set as behaviors by default
• MC1411577: Microsoft Defender: Automated investigation and response (AIR) integrated into antivirus with manual triggering removed
• MC1462464: Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator role is being retired
• MC1461705: Microsoft Defender XDR: Unified identity timeline on the Identity page
• MC1461704: Microsoft Defender XDR: Unified response actions across identity accounts
• MC1457836: Tenant will be auto-enabled into Microsoft Defender Unified RBAC
• MC1255406: Microsoft Purview | Data Security Triage Agent Summaries for DLP Alerts in Microsoft Defender XDR
• MC1455017: New Defender for Identity health alert for missing domain controller network traffic
• MC1455016: New Defender for Identity health issue for missing Windows events from a domain controller
• MC1454382: Action required: Update Microsoft Defender for Endpoint Android App
• MC1431377: Microsoft Defender for Office 365: AIR Investigation Experience Improvements
• MC1446794: Microsoft Teams: Report security concerns in Teams meetings
• MC1447673: Microsoft Teams: Users can report security concerns in group calls
• MC1438566: Action Required: Defer Upgrade to Microsoft Defender for Endpoint on Linux Build 101.26052.0009
• MC1440701: MDO Encrypted email attachment protection
• MC1330888: Upcoming change to Microsoft Defender for Endpoint Advanced Hunting: removal of SMB signature data
• MC1402307: Microsoft Defender for Cloud Apps: Improvements to threat protection capabilities
• MC1304290: 2026 Microsoft 365 Packaging Update
• MC1358832: Microsoft Secure Score: New recommendation to reduce inbound internet exposure
• MC1381122: Microsoft Defender XDR: Retirement of in-app OS update notifications in Defender for Endpoint (iOS)
• MC1381119: Microsoft Defender for Endpoint security updates move to Microsoft Update on Windows
• MC1324285: Microsoft Defender XDR: Password protection account action buttons
• MC1323263: Microsoft Defender for Office 365: ZAP expands cleanup to Deleted Items
• MC1293483: Microsoft Secure Score: New recommendation for Secure Boot 2023 certificate readiness in Microsoft Defender for Endpoint
• MC1276511: Upcoming retirement of older Microsoft Defender for Endpoint mobile app versions (iOS and Android)
• MC1268924: Microsoft Defender XDR: Email summary powered by Security Copilot on the email entity page
• MC1261596: Notice: Security Copilot will be included as part of your Microsoft 365 E5 plan soon
• MC1254554: Upcoming retirement of select threat detections in Microsoft Defender for Cloud Apps
• MC1245219: Microsoft Defender for iOS: End of support for iOS 16 devices
• MC1239187: Defender for Office 365 URL click alerts now include Microsoft Teams
• MC1223828: Microsoft Teams: Report a suspicious call
• MC1192257: Microsoft Defender Threat Intelligence: Convergence with Microsoft Defender and Microsoft Sentinel
• MC1183015: Fix/Update Microsoft Sentinel Account Entity Naming to avoid inconsistent account identification in incidents and alerts
• MC992217: Microsoft Defender: Changes to Defender for Cloud Apps alerts