Security News > 2023 > July > Microsoft fixes bug behind Windows LSA protection warnings, again

Microsoft is again pushing a Defender Antivirus update that fixes a known issue triggering Windows Security warnings that Local Security Authority Protection is off.
Microsoft acknowledged this issue impacts Windows 11 21H2 and 22H2 systems after numerous user reports about "Local Security Authority protection is off. Your device may be vulnerable." warnings, although LSA Protection was already enabled.
To check if LSA protection is enabled on your computer, you can use the Windows Event Viewer and look for an "LSASS.exe was started as a protected process with level:4." Wininit event which confirms that the process is isolated and secured by LSA Protection.
Two months ago, in March, Microsoft announced that LSA Protection would be enabled by default for Windows 11 Insiders in the Canary channel, provided their systems passed an incompatibility audit check.
Microsoft pulls Defender update fixing Windows LSA Protection bug.
Microsoft fixes bug that breaks Windows Start Menu, UWP apps.
News URL
Related news
- New Windows 11 trick lets you bypass Microsoft Account requirement (source)
- Microsoft adds hotpatching support to Windows 11 Enterprise (source)
- Microsoft starts testing Windows 11 taskbar icon scaling (source)
- Windows 11 Forces Microsoft Account Sign In & Removes Bypass Trick Option (source)
- Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws (source)
- Microsoft: Windows CLFS zero-day exploited by ransomware gang (source)
- Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824) (source)
- Microsoft fixes auth issues on Windows Server, Windows 11 24H2 (source)
- Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability (source)
- Microsoft: April 2025 updates break Windows Hello on some PCs (source)