Endpoint Agent Release Notes - August 2026

Fix: Resolved a crash with Ransomware Protection.

Fix: Resolved an issue where AI traffic detection events for domain-based rules were not reported to the console.

Fix: Resolved an issue where AI traffic detections generated duplicate entries in the console.

Fix: Resolved an issue where duplicate AI traffic detection events were being reported to the console.

Fix: Resolved several issues where incorrect data appeared in AI traffic detection entries in the console.

Feature: On Windows 11, users can now access "Scan with ThreatDown" directly from the right-click context menu without expanding "Show more options." This option is enabled or disabled through policy settings in the ThreatDown console.

Feature: The Endpoint Agent now re-checks whether a third-party application still requires an update before force-closing it, preventing unnecessary interruptions when the application has already been updated manually.

Feature: Improved USB drive scan times.

Feature: Improved AI-based threat detection reporting, providing clearer and more actionable events in the ThreatDown console.

Feature: Improved Endpoint Agent stability by making a background communication component more resilient to data corruption.

Fix: Resolved an issue where the Endpoint Agent incorrectly reported an "Endpoint protection not running" error in the ThreatDown console even when protection was operating normally.

Fix: Resolved an issue where removable USB drives were not being detected by the Endpoint Agent, preventing device control policies from being enforced.

Fix: Resolved an issue where certain removable devices were not recognized due to an unsupported device path format, preventing device control policies from being applied.

Fix: Resolved an issue where the Endpoint Agent stopped automatically refreshing the quarantine list, causing the ThreatDown console to display outdated quarantine information.

Fix: Resolved an issue where the Endpoint Agent repeatedly attempted to refresh policies every 5 minutes when a protection component failed to initialize, causing unnecessary system activity.

Fix: Resolved an issue where AI-based detections targeting the same domain were not being merged within the configured time window, resulting in duplicate detection events in the ThreatDown console.

Fix: Resolved an issue where Device Control could incorrectly allow access to a device that should have been blocked by policy.

Fix: Resolved an issue where restoring a quarantined item was not properly reflected in the ThreatDown console.

Fix: Resolved an issue where DNS Content Filtering continued applying outdated exclusions after a policy update, rather than using the newly configured exclusion rules.