# Microsoft Defender false security alert bug

> Live situation record from CLSTR: https://clstr.news/situations/microsoft-defender-false-security-alert-bug
> Updated: 2026-09-19T11:17:38.000Z. Sources: 21. Developments: 3.

A software bug in Microsoft Defender caused Windows users to receive false security alerts claiming that antivirus protection had been disabled. These intrusive notifications appeared during system startup and at random intervals, often bypassing ‘Do Not Disturb’ settings. Microsoft confirmed that while the alerts were erroneous, the antivirus service remained fully functional and active.

Microsoft addressed the issue by releasing version 4.18.26080.4 of the software, which contains a critical fix to resolve the incorrect reporting of antivirus deactivation. The bug affected multiple platforms, including Windows 11 and Windows Server 2025. 

The discrepancy between the actual service status and the interface messages caused significant confusion for IT departments, as the notifications prompted users to attempt manual restorations of a service that was already operational. The corrective update aims to restore consistency between the protection services and the notification center.

## Timeline

### 2026-09-19: Microsoft patches Microsoft Defender false security alerts

Microsoft has issued a patch for Microsoft Defender to fix a bug that sent false alerts claiming the antivirus was disabled when it was actually functioning normally.

3 sources. https://clstr.news/cluster/microsoft-patches-microsoft-defender-false-security-alerts

### 2026-09-18: Microsoft updates Windows 11 with security fixes and UI enhancements

Microsoft is rolling out Windows 11 updates, including a fix for a Microsoft Defender status bug, major Start menu customization options, and performance optimizations to improve system responsiveness.

11 sources. https://clstr.news/cluster/microsoft-fixes-windows-11-bug-reporting-defender-as-disabled

### 2026-08-31: Microsoft Defender update triggers false security alerts on Windows

A Microsoft Defender update is triggering false security alerts on Windows, claiming antivirus is disabled. Microsoft confirms the bug and advises users to manually verify their security status.

9 sources. https://clstr.news/cluster/microsoft-defender-update-triggers-false-security-alerts-on-windows

---
Cite as: Microsoft Defender false security alert bug. CLSTR, https://clstr.news/situations/microsoft-defender-false-security-alert-bug