Microsoft Defender unterstützt Linux-Desktops im Unternehmen. Administratoren können die Geräte über ihre bestehende Infrastruktur verwalten.

Microsoft has made WSL Containers generally available, adding a new wslc.exe command and a container.exe alias for building, running, and deploying Linux containers on Windows. The release also brings enterprise controls through Microsoft Defender for Endpoint and Intune, plus support from VS Code Dev Containers, Aspire, and the VS Code Containers extension. #WSLContainers #MicrosoftDefenderforEndpoint #MicrosoftIntune #VSCode #Aspire

Microsoft Defender for Endpoint updates could disable protection on some Linux hosts after reboot; Microsoft withdrew affected builds and listed replacements.

Free unofficial micropatches are available for LegacyHive, a Windows zero-day in the User Profile Service that can let non-admin attackers escalate privileges and trigger code execution when an administrator logs in. The flaw was disclosed by Nightmare Eclipse, confirmed by researchers and Kevin Beaumont, and Microsoft says it is investigating while ACROS Security’s 0Patch offers protection for supported Windows versions. #LegacyHive #NightmareEclipse #0Patch #MicrosoftDefenderForEndpoint

A security researcher known as Nightmare Eclipse released LegacyHive, a Windows zero-day proof-of-concept that can escalate privileges on fully updated systems by abusing the Windows User Profile Service. The exploit was intentionally stripped down to require extra credentials, while Microsoft says it is investigating the claim and cybersecurity experts have confirmed the PoC works. #NightmareEclipse #LegacyHive #WindowsUserProfileService #MicrosoftDefenderForEndpoint