Post by @SocialistVibes01@lemmy.ml

2026-10-18 03:49 UTC

Microsoft Wants to Protect Your Linux Desktop with Defender Yes, you read that correctly. Microsoft is bringing its Defender security software to Linux desktops. The company has announced that Microsoft Defender for Endpoint now officially supports Linux desktop environments, with the feature currently available in public preview. And before anyone starts wondering whether Microsoft has suddenly decided that every Linux user needs antivirus software, there’s an important distinction. This isn’t the consumer version of Defender familiar to Windows users. Instead, it’s Microsoft’s enterprise security platform for organizations running Linux workstations. According to Microsoft, the expansion is driven by the growing use of Linux desktops among developers. These machines often access source code repositories, cloud infrastructure, credentials, and other sensitive resources, making them attractive targets for attackers. The idea is to give enterprise security teams the same visibility and protection across Linux desktops that they already have for Windows, macOS, and Linux servers. As for the capabilities, Defender for Endpoint provides real-time antivirus protection, endpoint detection and response, threat investigation, vulnerability management, and centralized security monitoring through the Microsoft Defender portal. Security administrators can use these tools to investigate suspicious activity, identify compromised machines, and respond to threats without managing Linux workstations through a separate security platform. Interestingly, Microsoft isn’t introducing a completely new Linux security agent for this purpose. According to its documentation, the desktop version uses the same deployment packages, installation methods, and security capabilities already available for Linux servers. The supported distributions are also the same. The list includes Ubuntu LTS, Debian, Fedora, Red Hat Enterprise Linux, openSUSE Leap, SUSE Linux Enterprise, Rocky Linux, AlmaLinux, and several others. Desktop environment choice doesn’t matter. Whether a workstation runs GNOME, KDE Plasma, or another graphical environment, compatibility depends on the underlying distribution and kernel rather than the desktop itself. There’s also an interesting detail regarding device identification. Defender attempts to determine whether a Linux installation is a server or workstation using operating system metadata and other system characteristics. When it cannot reliably identify a machine as a workstation, it classifies it as a server by default. Of course, Defender’s presence on Linux isn’t entirely new. Microsoft introduced its antivirus solution for Linux servers back in 2020, subsequently expanding its enterprise threat detection and response capabilities. What’s changing now is the official inclusion of desktop workstations. Finally, it’s also worth emphasizing that this remains a public preview, not a generally available release. Organizations interested in deploying it will need an appropriate Microsoft Defender for Endpoint subscription and must meet the existing Linux system requirements. For more details, see Microsoft’s official announcement.

Replies (24)

@Bell@lemmy.world 2026-10-18 03:53

Ahhhaaahahahaha

Open ##5098134
@Sanctus@anarchist.nexus 2026-10-18 04:04

All I know is I’m gonna use this to convince my boss to let me switch my work box to Linux. Then probably not install this.

Open ##5098376
@hperrin@lemmy.ca 2026-10-18 04:42

LOOOOOOOL. Get fucked, Microsoft.

Open ##5098559
@stellargmite@lemmy.world 2026-10-18 04:56

Microsoft doing its own satirical comedy about itself . Almost feels wrong to laugh. But I will, when I get to work. It’ll go in my timesheet too.

Open ##5098655
@LewdLemon@sh.itjust.works 2026-10-18 05:09

Lemmy put it like this: free courses in self-defense are cool and all. But do they really have to be organised by the serial sex offender?

Open ##5098684
@Brkdncr@lemmy.world 2026-10-18 05:50

This is so Linux purists can use their OS of choice in environments that require attestation so as to pass conditional access requirements.

Open ##5101006
@JustEnoughDucks@slrpnk.net 2026-10-18 06:14

What chance is there that this is vibe coded? 80%? 😂

Open ##5101171
@eremophila@lemmy.zip 2026-10-18 06:26

Why is everyone pushing me towards bsd?

Open ##5101231
@mmmm@sopuli.xyz 2026-10-18 07:26

Open ##5101800
@Solrac@lemmy.world 2026-10-18 08:22

I guess, between this, Epic Games Slopnauncher, the mass of people coining since 2025… Is… Is 2026, the actual year of the Linux Desktop? I know we won’t get the grandiose everything is suddenly Linux, but kind of feels like we’ve been getting there, and now ((Popular and Trash)) companies are migrating, in some capacity

Open ##5102509
@Corngood@lemmy.ml 2026-10-18 08:49

Will this somehow make IO as slow as Windows?

Open ##5103130
@daggermoon@piefed.world 2026-10-18 08:53

Defender deletes my fucking files. Fuck defender.

Open ##5103178
@XiJinpingStanAccount@lemmy.ml 2026-10-18 09:32

Ironically security is one of the single most commonly used excuses for companies and governments to violate your privacy. Sorry microsoft, you can’t scan all my files. Womp womp.

Open ##5104368
@zdhzm2pgp@lemmy.ml 2026-10-18 10:48

🤣

Open ##5105849
@Clark@lemmy.ml 2026-10-18 11:49

Then I need a tool to remove Microslop Defender safely too

Open ##5107232
@yxc999@lemmy.ml 2026-10-18 12:18

I was actually excited to read this because I thought if it was open source, you could un-Microsoft the code it but yeah, that was naive of me. Fucking clowns.

Open ##5107762
@blackberry28@sh.itjust.works 2026-10-18 13:42

If this leads to more companies accepting Linux as a Desktop OS for their employees, I think this is actually a good move. Helps Linux to become more widespread, and maybe even non-IT people will get to know it better. This in turn could lead to more people using Linux in their private lives as well.

Open ##5109104
@boaratio@lemmy.world 2026-10-18 16:35

No they don’t. They want endpoint access to Linux computers. For reference, see Crowdstrike.

Open ##5113165
@Mwa@thelemmy.club 2026-10-18 18:53

Please keep Defender on Windows

Open ##5115898
@Fizz@lemmy.nz 2026-10-18 20:15

I dont think defenders model can work on linux. I may be wrong but windows defender is powerful because its able to build a profile of windows and then look at differences across its massive fleet. There is no basic linux and the differences across all systems are pretty huge. So that only leaves scanning for virus signatures (clamav does this already) and detecting potentially malicious behaviour which defender has always been dogshit at compared to crowd strike. Maybe im missing some defender features since ive never worked anywhere that uses defender enterprise.

Open ##5117625
@sonalder@lemmy.ml 2026-10-18 20:42

Microslop wants to spy on your Linux Desktop with Ofender*

Open ##5118183
@ouch@lemmy.world 2026-10-18 22:39

A lot of nice sounding words when it’s really about employee monitoring and control. This is bad news for Linux developers at work. One reason for wanting Linux is to get rid of all the privacy violating corporate spyware. Now corporate forces this spyware on you, or you can’t access any corporate resources from your machine. Have fun developing when you need to start worrying what sudo commands you run, because some raise alerts in IT. I hope someone reverse engineers mdatp and documents how to limit how much of your privacy it can invade. That shit needs to be jailed into namespaces that are limited to absolute minimum necessary.

Open ##5120399
@DrunkAnRoot@sh.itjust.works 2026-10-19 04:30

Who would install a virus that protects them from other viruses

Open ##5127438
@Draegur@lemmy.zip 2026-10-20 10:49

And I want microsoft to eat shit and shit glass.

Open ##5159643