Microsoft Defender for Cloud Updates

File Integrity Monitoring requires MDE agent version 10.8799+ for legacy Windows

Kubernetes gated deployment support for AKS Automatic (GA)

Severity‑based risk assignment for "Not evaluated" recommendations

Deprecation of preview of container and container images vulnerability recommendations

Container runtime antimalware detection and blocking (Preview)

Scanning support for Minimus and Photon OS container images

Microsoft Defender for Cloud is announcing Microsoft Security Private Link in Preview.

AWS CloudTrail ingestion (Preview)

Upcoming change to CIEM recommendation logic

Kubernetes gated deployment (GA)

Update to Attack Path Analysis logic

Attack Path now includes Entra OAuth application compromise

In-pipeline container vulnerability scanning (preview)

Restrict Pod Access response action (preview)

Updates to container image continuous vulnerability re-scan policy

Additional compliance frameworks now generally available

Deprecation Notice: Update Outbound Rules for Microsoft Defender for Containers

Malware automated remediation in Defender for Storage (Preview)

Trivy dependency scanning for code repositories (Update)

Defender for Storage Optional index tags for storing malware scanning results

GA: Defender CSPM and Defender for Servers Plan 2 in Azure Government cloud

Storage aggregated logs in XDR's Advanced Hunting (Preview)

Four new Regulatory Compliance Standards

Scanning support for Chainguard container images and Wolfi

Agentless FIM enables organizations to monitor file and registry changes

Agentless code scanning – GitHub support and customizable coverage now available (Preview)

Customizable on-upload malware scanning filters in Defender for Storage

General Availability for Customizable on-upload malware scanning filters in Defender for Storage

Assign recommendations to active users (Preview)