Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows

Microsoft will begin delivering Defender for Endpoint EDR updates via Microsoft Update (using KB5005292), with rollout starting for Windows 10 in late May 2026 and expanding to Windows 11 and other supported versions through fall 2026. Organizations that use Microsoft Update require no action; those that deploy update packages manually should include the new package. Devices must run Sense version 10.8798.25857.1000 or later and have specified prerequisite Windows updates installed; a new directory (%ProgramData%\Microsoft\Microsoft Defender\Defender Update) will be created when the first EDR update is applied.