The main benefits of this major update include performance and prevention improvements, as well as adding support for custom file indicators on macOS and Linux. This protection brings machine learning, big-data analysis, in-depth threat research, and the Microsoft cloud infrastructure, to protect devices (or endpoints) in your organization. The Microsoft Defender Antivirus antimalware engine is a key component of next-generation protection. We are announcing a significant upgrade to our next-generation protection on Linux and macOS with a new, enhanced engine. Organizations that have not allow-listed by July 31, 2022, access to the above mentioned URLs will be unable to download threat definition updates required for effective anti-malware protection. Starting July 31, 2022, access to these URLs will be * required* to ensure uninterrupted cloud-delivered protection on your Linux and macOS systems behind a proxy. To support the new Microsoft Defender for Endpoint on Linux and macOS anti-malware engine enhancements, you must allow-list within the proxy ecosystem in your environment the following URL endpoints: To ensure Microsoft Defender Antivirus cloud-delivered protection works properly, your security/IT team must configure your network/proxy/internet settings to allow connections between your endpoints and certain Microsoft URLs. Soon after general availability, app/platform versions older than 101.62.64 (released in February of 2022) will stop getting security intelligence updates. IMPORTANT: Ensure you are applying regular updates. The new engine will be gradually rolled out to all devices. Update: Enhanced antimalware engine for Linux and macOS is now generally available.

Azure antimalware extension