Microsoft Defender for Endpoint Now Supports Linux Desktops

• •Microsoft Defender for Endpoint now supports Linux desktops in public preview.
• •The service includes EDR, threat hunting, and vulnerability management capabilities.
• •Linux desktops are increasingly targeted, storing sensitive credentials and source code.

Microsoft has launched a public preview of Microsoft Defender for Endpoint for Linux desktops as of October 14, 2026. This extension aims to bolster security for developer and engineering workstations, which are increasingly targeted by attackers. The service includes endpoint detection and response (EDR), threat hunting, vulnerability management, and device isolation capabilities. As Linux desktops often store sensitive assets like source code and cloud access tokens, the lack of security focus on these devices has created vulnerabilities. Organizations can now manage Linux desktops alongside Windows and server environments through a unified security platform. The same agent used for Linux servers is applicable, automatically determining whether a device is a server or workstation. Supported distributions include Ubuntu, Debian, Fedora, and Red Hat Enterprise Linux, among others. This move is part of Microsoft's effort to address the security gap in Linux desktop environments.