Merge pull request #5342 from MicrosoftDocs/main

[AutoPublish] main to live - 10/22 13:31 PDT | 10/23 02:01 IST

Author: m365-skilling-repo-management[bot]

defender-endpoint/microsoft-defender-antivirus-updates.md

@@ -77,7 +77,8 @@ Updates contain:
 ### September-2025 (Platform: 4.18.25090.3009 | Engine: 1.1.25090.3001)
 
 - Security intelligence update version: **1.439.345.0**
-- Release date:  **September 8, 2025 (Engine) / September 21, 2025 (Platform)**
+- Release date:  **October 8, 2025 (Engine) / October 21, 2025 (Platform)**
+
 - Platform: **4.18.25090.3009**
 - Engine: **1.1.25090.3001**
 - Support phase: **Security and Critical Updates**

defender-office-365/email-authentication-dkim-configure.md

@@ -5,7 +5,7 @@ f1.keywords:
 author: chrisda
 ms.author: chrisda
 manager: bagol
-ms.date: 10/06/2025
+ms.date: 10/22/2025
 audience: ITPro
 ms.topic: how-to
 
@@ -503,6 +503,11 @@ If you'd rather use PowerShell to rotate DKIM keys for a domain, connect to [Exc
 
    To confirm the corresponding public key that's used to verify the DKIM signature (which infers the private key that was used to sign the message), check the **s=** value in the **DKIM-Signature** header field (the selector; for example, `s=selector1-contoso-com`).
 
+   > [!IMPORTANT]
+   > If you change the bit depth of DKIM keys from 1024 to 2048 using the _KeySize_ parameter, the update applies only to the next active selector during the first key rotation. When you rotate keys again, the previously inactive selector becomes active, and the bit depth is also updated to 2048.
+   >
+   > When you rotate DKIM keys on a domain, the change isn't immediate. It takes four days (96 hours). While the key rotation is in progress, you can't do another key rotation.
+
 For detailed syntax and parameter information, see the following articles:
 
 - [Get-DkimSigningConfig](/powershell/module/exchangepowershell/get-dkimsigningconfig)

defender-office-365/quarantine-faq.yml

@@ -6,7 +6,7 @@ metadata:
   author: chrisda
   ms.author: chrisda
   manager: bagol
-  ms.date: 05/21/2025
+  ms.date: 10/22/2025
   audience: ITPro
   ms.topic: faq
   ms.localizationpriority: medium
@@ -176,9 +176,9 @@ sections:
       - question: |
           Are wildcards supported when searching for quarantined messages? Can I search for quarantined messages for a specific domain?
         answer: |
-          Wildcards aren't supported in the Microsoft Defender portal. For example, when searching for a sender, you need to specify the full email address. But, you can use wildcards in Exchange Online PowerShell PowerShell.
+          Wildcards are supported in both the Microsoft Defender portal and Exchange Online PowerShell. For example, you can use `*@contoso.com` as a sender address or recipient address filter to search for quarantined messages.
 
-          For example, copy the following PowerShell code into NotePad and save the file as .ps1 in a location that's easy for you to find (for example, C:\Data\QuarantineRelease.ps1).
+          For bulk search and release, copy the following PowerShell code into NotePad and save the file as .ps1 in a location that's easy for you to find (for example, C:\Data\QuarantineRelease.ps1).
 
           Then, after you connect to [Exchange Online PowerShell](/powershell/exchange/connect-to-exchange-online-powershell), run the following command to run the script: