What's new in Microsoft 365 Business Premium and Microsoft Defender for Business

Article
01/02/2024

Applies to:

This article lists new features in the latest release of Microsoft 365 Business Premium and Microsoft Defender for Business. Features that are currently in preview are denoted with (preview).

January 2024

Ability to manage endpoint security subscription settings. Defender for Business customers who have a mix of subscriptions (such as Defender for Business and Defender for Endpoint Plan 2 licenses) can now change their subscription settings to apply Defender for Endpoint Plan 2 features and capabilities across devices. See Manage your endpoint security subscription settings across client devices.

December 2023

Streaming API is now generally available for Defender for Business. For partners or customers looking to build their own security operations center, the Defender for Endpoint streaming API is now available for Defender for Business and Microsoft 365 Business Premium. See Use the streaming API with Microsoft Defender for Business.

October 2023

Automated attack disruption capabilities are coming to Defender for Business! Learn how these capabilities can disrupt a human-operated attack almost immediately. See Automatic attack disruption in Microsoft Defender for Business.
October is Cybersecurity Awareness Month. See how we're making it easier for small and medium-sized businesses to stay secure.
Special pricing for new Microsoft 365 Business Premium customers. During October, we're offering special pricing for new customers. For all the details, see Security for your small or medium-sized business.

July 2023

Tip

Read all about the exciting, new capabilities releasing in July 2023 in the Tech Community blog: New SMB security innovations from Microsoft Inspire 2023.

Mobile threat defense is rolling out. Mobile threat defense includes operating system-level threat and vulnerability management, web protection, and app security. It's not generally available in Defender for Business and Microsoft 365 Business Premium. Learn more about mobile threat defense.
Automatic attack disruption is rolling out. During an ongoing attack, automatic attack disruption capabilities swiftly contain compromised devices to help stop lateral movement within the network and minimize the overall impact of the attack. Automatic attack disruption is included in Defender for Business and Microsoft 365 Business Premium. Learn more about automatic attack disruption.
Security summary reports are rolling out. Use these reports to view threats that were prevented by Defender for Business, Microsoft Secure Score status, and recommendations for improving security. See Reports in Microsoft Defender for Business.
Streaming API (preview) is now available for Defender for Business. For partners or customers looking to build their own security operations center, the Defender for Endpoint streaming API is now in preview for Defender for Business and Microsoft 365 Business Premium. The API supports streaming of device file, registry, network, sign-in events and more to Azure Event Hub, Azure Storage, and Microsoft Sentinel to support advanced hunting and attack detection. See Use the streaming API (preview) with Microsoft Defender for Business.
Managed detection and response integration with Blackpoint Cyber. This solution is ideal for customers who don't have the resources to invest in an in-house security operations center and for partners who want to augment their IT team with security experts to investigate, triage, and remediate the alerts generated by Defender for Business and Business Premium. Learn more bout Blackpoint Cyber.
Customizable security baselines and configuration drift reports in Microsoft 365 Lighthouse. For Microsoft Managed Service Providers (MSPs), Microsoft 365 Lighthouse includes security baselines to deploy a standardized set of configurations to customers' tenants. Microsoft 365 Lighthouse now lets MSPs customize baselines based on expertise and tailor them to customers' unique needs. Learn more about Microsoft 365 Lighthouse.
New training resources for Microsoft partners. To provide step-by-step guidance for partners on how to build services based on critical CIS cybersecurity controls, a Security Managed services kit and a three-part digital training series are now available. See IT partner resources to help build security services in the Tech Community blog: New SMB security innovations from Microsoft Inspire 2023.

March 2023

Mobile threat defense (preview) is added to Defender for Business. The ability to onboard iOS and Android devices to the standalone version of Defender for Business is now in preview! These capabilities provide OS-level threat and vulnerability management, web protection, and app security to help you and employees stay more secure on the go. See Mobile threat defense capabilities in Microsoft Defender for Business.
Monthly security summary report (preview) is added to Defender for Business (preview). The new monthly security summary report shows how secure your organization is across identity, devices, information, and apps. You can view threats detected (and blocked) by Defender for Business together with your current status from Microsoft Secure Score. Recommendations to improve your security are also provided. See Reports in Microsoft Defender for Business.
Device exposure score is now visible in Microsoft 365 Lighthouse (preview). Microsoft Cloud Solution Providers (CSPs) who are using Microsoft 365 Lighthouse can now view and manage device exposure scores across customer tenants. These capabilities enable partners to discover which customers' devices are at risk because of vulnerabilities. See Overview of the Vulnerability management page in Microsoft 365 Lighthouse.

January 2023

Attack surface reduction capabilities are rolling out. Attack surface reduction capabilities in Defender for Business include attack surface reduction rules and a new attack surface reduction rules report. Attack surface reduction rules target certain behaviors that are considered risky because they're commonly abused by attackers through malware. In the Microsoft Defender portal (https://security.microsoft.com/), you can now view a report showing detections and configuration information for attack surface reduction rules. In the navigation pane, choose Reports, and under Endpoints, choose Attack surface reduction rules.
Default experience for Defender for Business when an enterprise plan is added. Defender for Business now retains its default experience (simplified configuration and setup) even if an enterprise plan, such as Defender for Endpoint Plan 2 or Microsoft Defender for Servers Plan 1 or 2 is added. To learn more, see What happens if I have a mix of Microsoft endpoint security subscriptions?

November 2022

Microsoft Defender for Business servers, a new add-on for Defender for Business, is now generally available. To learn more, see the following articles:
- How to get Microsoft Defender for Business servers
- Tech Community Blog: Server security made simple for small businesses
License reporting (preview) in Defender for Business. A new report (rolling out in preview) enables you to view your Defender for Business license usage. To learn more, see Reports in Microsoft Defender for Business.

July 2022

Microsoft Defender for Business servers (preview) is available to customers who have at least one paid license of Microsoft 365 Business Premium or Defender for Business. See Tech Community blog: Server protection for small business is now in preview within Microsoft Defender for Business.

May 2022

Defender for Business (standalone) is now generally available. To learn more, see the following resources:

March 2022

Microsoft 365 Business Premium now includes Defender for Business. To learn more, see Tech Community blog: New security solutions to help secure small and medium businesses.