|
| 1 | +--- |
| 2 | +title: What's new in Microsoft Defender for Business |
| 3 | +description: Learn about new features and capabilities in Microsoft Defender for Business. |
| 4 | +author: chrisda |
| 5 | +ms.author: chrisda |
| 6 | +manager: orspodek |
| 7 | +ms.date: 08/19/2025 |
| 8 | +ms.topic: how-to |
| 9 | +ms.service: defender-business |
| 10 | +ms.localizationpriority: medium |
| 11 | +ms.reviewer: nehabha |
| 12 | +f1.keywords: NOCSH |
| 13 | +ms.collection: |
| 14 | +- SMB |
| 15 | +- m365-security |
| 16 | +- tier1 |
| 17 | +search.appverid: MET150 |
| 18 | +audience: Admin |
| 19 | +--- |
| 20 | + |
| 21 | +# What's new in Microsoft 365 Defender for Business |
| 22 | + |
| 23 | +This article lists new features in the latest releases of Microsoft Defender for Business. Features that are currently in preview are denoted with **(preview)**. |
| 24 | + |
| 25 | +> [!TIP] |
| 26 | +> Microsoft 365 Business Premium includes Microsoft Defender for Business. For information about what's new in security in Microsoft 365 for business (including Business Premium), see [What's new in security in Microsoft 365 for business](/microsoft-365/admin/security-and-compliance/m365b-security-whats-new). |
| 27 | +
|
| 28 | +## January 2024 |
| 29 | + |
| 30 | +- **Ability to manage endpoint security subscription settings**. Defender for Business customers who have a mix of subscriptions (such as Defender for Business and Defender for Endpoint Plan 2 licenses) can now change their subscription settings to apply Defender for Endpoint Plan 2 features and capabilities across devices. See [Manage your endpoint security subscription settings across client devices](mdb-manage-subscription.md). |
| 31 | + |
| 32 | +## December 2023 |
| 33 | + |
| 34 | +- **Streaming API is now generally available for Defender for Business**. For partners or customers looking to build their own security operations center, the Defender for Endpoint streaming API is now available for Defender for Business and Microsoft 365 Business Premium. See [Use the streaming API with Microsoft Defender for Business](mdb-streaming-api.md). |
| 35 | + |
| 36 | +## October 2023 |
| 37 | + |
| 38 | +- **Automated attack disruption** capabilities are coming to Defender for Business! Learn how these capabilities can disrupt a human-operated attack almost immediately. See [Automatic attack disruption in Microsoft Defender for Business](mdb-attack-disruption.md). |
| 39 | + |
| 40 | +- **October is Cybersecurity Awareness Month**. See [how we're making it easier for small and medium-sized businesses to stay secure]( https://aka.ms/cybersecuritysmb). |
| 41 | + |
| 42 | +## July 2023 |
| 43 | + |
| 44 | +> [!TIP] |
| 45 | +> **Read all about the exciting, new capabilities releasing in July 2023 in the [Tech Community blog: New SMB security innovations from Microsoft Inspire 2023](https://aka.ms/SMBSecurityJulyBlog)**. |
| 46 | +
|
| 47 | +- **Mobile threat defense is rolling out**. Mobile threat defense includes operating system-level threat and vulnerability management, web protection, and app security. It's not generally available in Defender for Business. [Learn more about mobile threat defense](mdb-mtd.md). |
| 48 | + |
| 49 | +- **Automatic attack disruption** is rolling out. During an ongoing attack, automatic attack disruption capabilities swiftly contain compromised devices to help stop lateral movement within the network and minimize the overall impact of the attack. Automatic attack disruption is included in Defender for Business. [Learn more about automatic attack disruption](/defender-xdr/automatic-attack-disruption). |
| 50 | + |
| 51 | +- **Security summary reports** are rolling out. Use these reports to view threats that were prevented by Defender for Business, Microsoft Secure Score status, and recommendations for improving security. See [Reports in Microsoft Defender for Business](mdb-reports.md). |
| 52 | + |
| 53 | +- **Streaming API (preview) is now available for Defender for Business**. For partners or customers looking to build their own security operations center, the Defender for Endpoint streaming API is now in preview for Defender for Business. The API supports streaming of device file, registry, network, sign-in events and more to Azure Event Hub, Azure Storage, and Microsoft Sentinel to support advanced hunting and attack detection. See [Use the streaming API (preview) with Microsoft Defender for Business](mdb-streaming-api.md). |
| 54 | + |
| 55 | +- **Managed detection and response integration with Blackpoint Cyber**. This solution is ideal for customers who don't have the resources to invest in an in-house security operations center and for partners who want to augment their IT team with security experts to investigate, triage, and remediate the alerts generated by Defender for Business. [Learn more bout Blackpoint Cyber](https://aka.ms/BlackpointMSFT). |
| 56 | + |
| 57 | +- **Customizable security baselines and configuration drift reports in Microsoft 365 Lighthouse**. For Microsoft Managed Service Providers (MSPs), Microsoft 365 Lighthouse includes security baselines to deploy a standardized set of configurations to customers' tenants. Microsoft 365 Lighthouse now lets MSPs customize baselines based on expertise and tailor them to customers' unique needs. [Learn more about Microsoft 365 Lighthouse](/microsoft-365/lighthouse/m365-lighthouse-overview). |
| 58 | + |
| 59 | +- **New training resources for Microsoft partners**. To provide step-by-step guidance for partners on how to build services based on critical CIS cybersecurity controls, a Security Managed services kit and a three-part digital training series are now available. See **IT partner resources to help build security services** in the [Tech Community blog: New SMB security innovations from Microsoft Inspire 2023](https://aka.ms/SMBSecurityJulyBlog). |
| 60 | + |
| 61 | +## March 2023 |
| 62 | + |
| 63 | +- **Mobile threat defense (preview) is added to Defender for Business**. The ability to [onboard iOS and Android devices](mdb-onboard-devices.md) to the standalone version of Defender for Business is now in preview! These capabilities provide OS-level threat and vulnerability management, web protection, and app security to help you and employees stay more secure on the go. See [Mobile threat defense capabilities in Microsoft Defender for Business](mdb-mtd.md). |
| 64 | + |
| 65 | +- **Monthly security summary report (preview) is added to Defender for Business** (preview). The new monthly security summary report shows how secure your organization is across identity, devices, information, and apps. You can view threats detected (and blocked) by Defender for Business together with your current status from Microsoft Secure Score. Recommendations to improve your security are also provided. See [Reports in Microsoft Defender for Business](mdb-reports.md). |
| 66 | + |
| 67 | +- **Device exposure score is now visible in Microsoft 365 Lighthouse** (preview). Microsoft Cloud Solution Providers (CSPs) who are using [Microsoft 365 Lighthouse](/microsoft-365/lighthouse/m365-lighthouse-overview) can now view and manage device exposure scores across customer tenants. These capabilities enable partners to discover which customers' devices are at risk because of vulnerabilities. See [Overview of the Vulnerability management page in Microsoft 365 Lighthouse](/microsoft-365/lighthouse/m365-lighthouse-vulnerability-management-page-overview). |
| 68 | + |
| 69 | +## January 2023 |
| 70 | + |
| 71 | +- **Attack surface reduction capabilities are rolling out**. [Attack surface reduction capabilities in Defender for Business](mdb-asr.md) include attack surface reduction rules and a new attack surface reduction rules report. Attack surface reduction rules target certain behaviors that are considered risky because they're commonly abused by attackers through malware. In the Microsoft Defender portal (<https://security.microsoft.com>), you can now view a report showing detections and configuration information for attack surface reduction rules. In the navigation pane, choose **Reports**, and under **Endpoints**, choose **Attack surface reduction rules**. |
| 72 | + |
| 73 | +- **Default experience for Defender for Business when an enterprise plan is added**. Defender for Business now retains its default experience ([simplified configuration and setup](mdb-setup-configuration.md)) even if an enterprise plan, such as [Defender for Endpoint Plan 2](/defender-endpoint/microsoft-defender-endpoint) or [Microsoft Defender for Servers Plan 1 or 2](/azure/defender-for-cloud/plan-defender-for-servers) is added. To learn more, see [What happens if I have a mix of Microsoft endpoint security subscriptions](/defender-business/mdb-faq#what-happens-if-i-have-a-mix-of-microsoft-endpoint-security-subscriptions)? |
| 74 | + |
| 75 | +## November 2022 |
| 76 | + |
| 77 | +- **Microsoft Defender for Business servers**, a new add-on for Defender for Business, is now generally available. To learn more, see the following articles: |
| 78 | + - [How to get Microsoft Defender for Business servers](get-defender-business.md) |
| 79 | + - [Tech Community Blog: Server security made simple for small businesses](https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/server-security-made-simple-for-small-businesses/ba-p/3648928) |
| 80 | + |
| 81 | +- **License reporting (preview) in Defender for Business**. A new report (rolling out in preview) enables you to view your Defender for Business license usage. To learn more, see [Reports in Microsoft Defender for Business](mdb-reports.md). |
| 82 | + |
| 83 | +## July 2022 |
| 84 | + |
| 85 | +- **Microsoft Defender for Business servers (preview)** is available to customers who have at least one paid license of Microsoft 365 for business or Defender for Business. See [Tech Community blog: Server protection for small business is now in preview within Microsoft Defender for Business](https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/server-protection-for-small-business-now-in-preview-within/ba-p/3571185). |
| 86 | + |
| 87 | +## May 2022 |
| 88 | + |
| 89 | +- **Defender for Business** (standalone) is now generally available. To learn more, see the following resources: |
| 90 | + - [Tech Community blog: Introducing Microsoft Defender for Business](https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/introducing-microsoft-defender-for-business/ba-p/2898701) |
| 91 | + - [What is Microsoft Defender for Business?](mdb-overview.md) |
| 92 | + - [Get Microsoft Defender for Business](get-defender-business.md) |
| 93 | + |
| 94 | +## March 2022 |
| 95 | + |
| 96 | +- **Microsoft 365 Business Premium now includes Defender for Business**. To learn more, see [Tech Community blog: New security solutions to help secure small and medium businesses](https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/new-security-solutions-to-help-secure-small-and-medium/ba-p/3207043). |
0 commit comments