Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update
ID: e1278abc-f0d9-563b-8d91-7ed96d7d1ff4
STIX ID: report--e1278abc-f0d9-563b-8d91-7ed96d7d1ff4
Feed Name: The Register (Security)
Threat Score
Microsoft disclosed two defects in Defender for Endpoint on Linux: an update (101.26042.0000–101.26042.0009) that can disable the Defender service after a reboot and a separate issue that blocks installation on FIPS-enabled RHEL 8 and 9. Affected machines may have received the faulty build via automatic updates; Microsoft identifies fixes in builds 101.26042.0011 and 101.26052.0011.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.