Microsoft resolves false 'Defender Antivirus is turned off' alerts after update bug
A known issue triggered incorrect warnings that Defender Antivirus was disabled; Microsoft has released a fix, with no security compromise reported.
Key Takeaways
- Microsoft fixed a bug causing false 'Defender Antivirus is turned off' alerts after recent updates.
- The issue was not a vulnerability and no exploitation has been reported.
- Users should install the latest Windows updates to resolve the problem.
- No CVE identifiers or CVSS scores were assigned to this issue.
Quick answers
- What happened?
- Microsoft has fixed a known issue that caused Windows devices to display false alerts stating that Defender Antivirus was turned off after installing recent updates. The bug, which did not involve any security vulnerability or exploitation, led to confusion among users who may have taken unnecessary manual actions. Microsoft advises installing the latest updates to resolve the issue.
- Which products are affected?
- Microsoft Defender Antivirus
- What should defenders do?
- Install the latest Windows updates to apply the fix. If the issue persists, verify Defender Antivirus status in Windows Security and restart the device.
Microsoft has resolved a known issue that caused incorrect alerts warning that Defender Antivirus was turned off after installing recent updates. The bug, reported by BleepingComputer on September 18, 2026, affected users globally and generated false notifications in the Windows Security interface, leading some to believe their antivirus protection was disabled.
According to Microsoft, the issue was not a security vulnerability and no exploitation has been reported. The false alerts were triggered by a bug in recent updates, causing Defender Antivirus to appear as turned off even though it remained active. This could have led users to manually re-enable the service or take other unnecessary actions, potentially disrupting their security posture.
Microsoft has released a fix for the issue. Users are advised to install the latest Windows updates to ensure the bug is fully resolved. The company did not specify which updates were affected, but the fix is expected to be delivered through standard Windows Update channels.
While the false alerts did not indicate a real security compromise, they highlight the importance of verifying system notifications and ensuring that security software remains operational. Organizations should confirm that Defender Antivirus is running correctly after applying updates and monitor for any unusual alerts.
No CVE identifiers were associated with this issue, and no CVSS score was assigned, as it was a functional bug rather than a security flaw. Microsoft's advisory provides guidance for users who continue to experience the issue after installing the fix.
Security Details
A known issue in Microsoft Defender Antivirus caused false alerts indicating the antivirus was turned off after installing recent updates. The bug did not disable the antivirus and was not exploitable. Microsoft released a fix via Windows Update.
Affected products
Microsoft Defender Antivirus
Mitigation
Install the latest Windows updates to apply the fix. If the issue persists, verify Defender Antivirus status in Windows Security and restart the device.
Sources
BleepingComputer
Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts
Sep 18, 2026 · 12:16
Original link
Related Security News
NeedyMantis Malware Used for Long-Term Persistence in Targeted Intrusions
Microsoft has identified a malware family named NeedyMantis being used by threat actors to maintain long-term, unauthorized access to already-breached networks. The malware has been observed in targeted intrusions across a range of sectors, including telecommunications, universities, medical nonprofits, intergovernmental organizations, and government contractors. Activity has been tracked since at least 2023 and remains ongoing.
_Dzmitry_Skazau_Alamy.jpg?width=720&quality=80&disable=upscale)
