365Fanatic / Product updates / Defender for Endpoint
Microsoft Defender for Endpoint · Feature

AI agent runtime protection updates

Preview July 2026
SummaryDetailedTimelineProduct updatesThis weekMC SummaryMC DetailedPnP Search

AI agent runtime protection includes these enhancements:- Vendor-supported agent event interfaces now work with standard platform and engine update channels, so no Beta channel configuration is required. Agent-native event inspection now supports Codex CLI and the GitHub Copilot app.- Network inspection is now supported for agents that don't expose vendor-supported event interfaces, including OpenClaw and similar Node.js-based Claw agents.For more information, see AI agent runtime protection with Microsoft Defender for Endpoint.

Documentation: AI agent runtime protection updates

View at Microsoft ↗ All Defender for Endpoint updates

This is in the weekly digest for week 40 · What changed this week? →

More Defender for Endpoint updates

PreviewSeptember 2026 Memory scan for Linux PreviewSeptember 2026 Microsoft Defender for Endpoint plug-in support for WSL containers (WSLc) PreviewSeptember 2026 Microsoft Defender support for Linux Desktops Generally availableSeptember 2026 New Microsoft Secure Score recommendations for AI-Readiness PreviewAugust 2026 Antivirus audit mode for Linux Generally availableAugust 2026 Offboarding API support for Linux

Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.