Until now, updates for Microsoft Defender for Endpoint were bundled with the monthly Windows security update. Microsoft is changing this behavior and moving those EDR updates to Microsoft Update, aligning them with the way other Microsoft Defender components are serviced.

And I think this is a good thing.

Why? Because it allows Microsoft to deliver security improvements for the EDR component independently from the regular operating system update cycle.

What is changing?

Microsoft Defender for Endpoint EDR updates will no longer be delivered as part of the monthly Windows security update. Instead, they will be delivered through Microsoft Update using KB5005292, once the required prerequisites are installed on the device.