Following new ISOs, Microsoft releases special Defender update for Windows 11 install images
Microsoft recently published new updated ISO install images for Windows 11 22H2 and Windows 10 22H2. The ISOs are based on the latest May Medicines Tuesday.
Following those, Microsoft has now released a new Defender anti-malware update package for Windows OS installation images, ie, for Windows Imaging Format (WIM) and VHD (Virtual Hard Disk) formats.
The latest definitions support Windows 11, all editions of Windows 10, and Windows Servers 2016 and 2019. This update package is necessary as a Windows installation image may contain old, outdated anti-malware definitions and software binaries.
Aside from better security, these updates can also provide improved performance benefits too in some cases.
Microsoft is delivering the latest security definitions for Windows images via security intelligence update version 1.389.44.0. The Defender package version is 20230503.1. In the support document describing the new update, Microsoft explains:
You can find details about the package and how to install it in the support article on Microsoft's official website.The first hours of a newly installed Windows deployment can leave the system vulnerable because of a Microsoft Defender protection gap. This is because the OS installation images may contain outdated antimalware software binaries.
[..] Devices using either the Windows built-in antivirus or another security solution can benefit from these updates.
[..] This article describes antimalware update package for Microsoft Defender in the OS installation images (WIM and VHD files). This feature supports the following OS installation images:
Version information
- Windows 11
- Windows 10 (Enterprise, Pro, and Home editions)
- Windows Server 2019
- Windows Server 2016
This package updates the anti-malware client, anti-malware engine, and signature versions in the OS installation images to following versions:
- Defender package version: 20230604.1
- Platform version: 4.18.23050.3
- Engine version: 1.1.23050.3
- Security intelligence version: 1.391.476.0
From Microsoft's security bulletin, we learn that the security intelligence update version 1.391.476.0 was released just a couple of days ago. It adds threat detections for various trojans, ransomware, and backdoor exploits, among others. For those wondering, the latest intelligence update is version 1.391.701.0 at the time of writing.
