Linux desktops need watching too.

Microsoft is extending Defender for Endpoint protection to Linux desktops through a public preview, covering antivirus, threat detection, vulnerability management and tools to investigate attacks and isolate compromised devices. Its official announcement focuses particularly on developer workstations.

Why developers? Their machines can provide access to source code, cloud infrastructure and the systems that build and release software. Compromising one laptop could give an attacker a route into considerably more valuable territory.

The practical benefit is consistent visibility. Linux workstations use the existing Linux Defender agent and deployment methods, with security teams managing them alongside

other endpoints through the same portal.

BUT..... this is enterprise protection in preview. Microsoft specifies Defender for Endpoint Plan 2, or Microsoft 365 E5 or E7. Support depends on the underlying Linux distribution and kernel version, so compatibility and prerequisites still need checking.

One clarification is that defender already protects Linux servers. This announcement extends that protection to desktops.

For customers, the next step is to identify Linux workstations missing from their security monitoring and assess a controlled pilot. Choosing Linux does not make a machine invisible to attackers..... only, sometimes, to its own IT department!