Merge pull request #3869 from potterdaims/patch-1

Author: denisebmsft

defender-endpoint/mac-whatsnew.md

@@ -6,7 +6,7 @@ author: emmwalshh
 ms.author: ewalsh
 manager: deniseb
 ms.localizationpriority: medium
-ms.date: 05/09/2025
+ms.date: 05/24/2025
 audience: ITPro
 ms.collection:
 - m365-security
@@ -44,7 +44,7 @@ To get the latest features, including preview capabilities (such as endpoint det
 
 ## Known issues
 
-- Apple fixed an issue on macOS [Ventura upgrade](https://developer.apple.com/documentation/macos-release-notes/macos-13_1-release-notes) and macOS [Sonoma upgrade](https://developer.apple.com/documentation/macos-release-notes/macos-14-release-notes) with the latest OS update. The issue impacts Microsoft Defender for Endpoint security extensions, and might result in losing Full Disk Access Authorization, impacting its ability to function properly.
+- Apple fixed an issue on macOS [Ventura upgrade](https://developer.apple.com/documentation/macos-release-notes/macos-13_1-release-notes) and macOS [Sonoma upgrade](https://developer.apple.com/documentation/macos-release-notes/macos-14-release-notes) with the latest OS update. The issue impacts Defender for Endpoint security extensions, and might result in losing Full Disk Access Authorization, impacting the ability of Defender for Endpoint to function properly.
 
 - In [macOS Sonoma 14.3.1](https://developer.apple.com/documentation/macos-release-notes/macos-14_3-release-notes), Apple made a change to the handling of Bluetooth devices that impacts Defender for Endpoint device control's ability to intercept and block access to Bluetooth devices.  At this time, the recommended mitigation is to use a version of macOS earlier than 14.3.1.
 
@@ -54,7 +54,7 @@ To get the latest features, including preview capabilities (such as endpoint det
 
    ![Screenshot showing prompts about incoming network connections](media/mac-whatsnew/image.png)
 
-If an end user encounters a prompt for Defender for Endpoint on macOS processes such as `wdavdaemon_enterprise` or `Microsoft Defender Helper`, the end user can safely choose the **Deny** option. This selection doesn't affect Defender for Endpoint's functionality.  Enterprises can also add *Microsoft Defender* to allow [incoming connections](https://support.apple.com/en-ca/guide/deployment/dep8d306275f/web).  This issue is fixed in macOS Sequoia 15.2.
+If an end user encounters a prompt for Defender for Endpoint on macOS processes such as `wdavdaemon_enterprise` or `Microsoft Defender Helper`, the end user can safely choose the **Deny** option. This selection doesn't affect Defender for Endpoint's functionality.  Enterprises can also add *Microsoft Defender* to allow [incoming connections](https://support.apple.com/en-ca/guide/deployment/dep8d306275f/web). This issue is fixed in macOS Sequoia 15.2.
 
 ## Sequoia support
 
@@ -71,6 +71,19 @@ If an end user encounters a prompt for Defender for Endpoint on macOS processes
 
 Behavior monitoring monitors process behavior to detect and analyze potential threats based on the behavior of the applications, daemons, and files within the system. As behavior monitoring observes how the software behaves in real-time, it can adapt quickly to new and evolving threats and block them. To learn more, see [Behavior Monitoring in Microsoft Defender for Endpoint on macOS](behavior-monitor-macos.md).
 
+### May-2025 (Build: 101.25042.0002  | Release version: 20.125042.2.0)
+
+| Build:             | **101.25042.0002**         |
+|--------------------|-----------------------|
+| Release version:   | **20.125042.2.0** |
+| Engine version:    | **1.1.25020.3000**       |
+| Signature version: | **1.427.540.0**      |
+
+##### What's new
+
+- `mdatp health --details edr` now includes AAD info
+- Bug and performance fixes
+
 ### Apr-2025 (Build: 101.25032.0006  | Release version: 20.125032.6.0)
 
 | Build:             | **101.25032.0006**         |