logo

Microsoft Defender for Endpoint Update Leaves Few Linux Servers Unprotected After Reboot

ID: c4e971ac-1b6c-55cc-a8e6-8c5f5d4cf1ad

STIX ID: report--c4e971ac-1b6c-55cc-a8e6-8c5f5d4cf1ad

Feed Name: cybersecurityNews.com

Threat Score
50/100

Date Published: 2026-07-27

Date Updated: 2026-07-27

Author: Guru Baran

...
...

Microsoft Defender for Endpoint Linux builds 101.26042.0000–101.26042.0009 contained a regression that could silently disable the mdatp antivirus service on upgraded-and-rebooted Linux servers, leaving systems unprotected; Microsoft removed the buggy builds from production and issued platform version 101.26042.0011 as a fix, while urging administrators to immediately check agent health and remediate affected endpoints.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.