Microsoft Enhances Windows Security with New Updates and Defender Release

This month has seen a series of understated yet significant updates from Microsoft, aimed at enhancing the security and performance of its Windows operating systems. Among these updates is KB5001716, which is designed to enforce updates on Windows PCs, ensuring users are equipped with the latest features and security patches. Additionally, the company has rolled out WinRE update KB5041979 and Setup update KB5041178 specifically for Windows 11 24H2.

Defender Update for Enhanced Security

In a related move, Microsoft recently introduced a new Defender update tailored for Windows installation images, applicable to both Windows Imaging Format (WIM) and Virtual Hard Disk (VHD) formats. This update encompasses Windows 11, Windows 10, and various server editions, including the soon-to-be-retired Server 2016, which is approaching its end of servicing status next year. To assist users in navigating this transition, Microsoft has provided a comprehensive uninstallation and decommissioning guide.

The necessity of this update package cannot be overstated, as it addresses the potential vulnerabilities posed by outdated anti-malware definitions and software binaries that may linger in older Windows installation images. By implementing these updates, users can not only bolster their security posture but may also experience performance enhancements in certain scenarios.

Microsoft is delivering the latest security definitions for Windows images through security intelligence update version 1.413.494.0. The accompanying Defender package version is also noted as 1.413.494.0. In the support documentation detailing this update, Microsoft highlights the importance of timely updates:

The first hours of a newly installed Windows deployment can leave the system vulnerable because of a Microsoft Defender protection gap. This is because the OS installation images may contain outdated antimalware software binaries.

Devices using either the Windows built-in antivirus or another security solution can benefit from these updates. This article describes the antimalware update package for Microsoft Defender in the OS installation images (WIM and VHD files). This feature supports the following OS installation images:

Windows 11
Windows 10 (Enterprise, Pro, and Home editions)
Windows Server 2022
Windows Server 2019
Windows Server 2016

Version Information

Defender package version: 1.413.494.0

This package updates the anti-malware client, anti-malware engine, and signature versions in the OS installation images to the following versions:

Platform version: 4.18.24060.7
Engine version: 1.1.24060.1
Security intelligence version: 1.413.494.0

According to Microsoft’s security bulletin, the security intelligence update version 1.413.494.0, released last month, enhances threat detection capabilities against a range of malicious software, including trojans, adware, and backdoor exploits. For those keeping track, the latest intelligence update stands at version 1.417.71.0 as of this writing.

How to roll back windows defender update?

Rolling back Windows Defender updates is not directly supported through standard user interfaces. However, you can use a system restore point if one was created before the update. Another alternative is to uninstall the update through Command Prompt using commands like 'mpcmdrun -removedefinitions -all' to revert to the previous version. It's important to ensure you have administrative privileges before proceeding.

How often does Windows Defender check for updates?

Windows Defender typically checks for updates every 24 hours. However, the frequency can be altered through Group Policy settings or by scheduling a task in the Task Scheduler. The application is designed to regularly update its virus definitions to provide the most recent protection against threats. Users can also manually trigger an update at any time through the Windows Security interface.

Update: 12 Aug 2024