Linux | July 2026 | 101.26052.0012
Analysis / inference: Microsoft released Defender for Endpoint for Linux version 101.26052.0012 with improved antivirus visibility, refined connectivity tests, and FIPS RHEL fix.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Endpoint releases · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Version 101.26052.0012 adds the antivirus_enforcement_level field to mdatp health, updates offline security intelligence connectivity tests, fixes FIPS-enabled RHEL update failures, and corrects WordPress Core software inventory reporting.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisThis release introduces enhanced antivirus enforcement visibility and connectivity test diagnostics directly in the mdatp health command, helping SOC and endpoint engineers verify Linux endpoint health without secondary validation steps.
Provides better diagnostic visibility into endpoint protection modes and connection failures on Linux hosts while fixing installation blocks on FIPS-enabled RHEL systems.
Section 03 · Recommended actions
- Upgrade Microsoft Defender for Endpoint on Linux to version 101.26052.0012.
- Verify that FIPS-enabled RHEL 8 and RHEL 9 devices successfully update.
- Check that Linux software inventory correctly displays WordPress Core installations.
- Run the mdatp health command on Linux endpoints to verify the new antivirus_enforcement_level field output.
- Review updated connectivity test diagnostics for offline security intelligence update paths on x64 and ARM64 platforms.