Microsoft has completed deployment of a fix that will prevent further impact from occurring. Further details can be found under MO497128 in the Microsoft 365 admin center.
Microsoft Defender ASR rules removing Taskbar icons and Shortcuts
Source: The Register
Security Administrators that use Microsoft Defender for Endpoint have noticed this morning multiple icons and application shortcuts being removed from the Taskbar and Start Menu. This appears to have been caused by an Attack Surface Reduction (ASR) rule that is not working properly. Users have noticed icons and shortcuts being removed as well as some programs being uninstalled in rare cases.
Microsoft has confirmed this is an issue this morning and have reverted the ASR rule to prevent impact while they investigate further. The revert is currently in progress and may take several hours to complete. They are currently tracking the issue as “SI MO497128” in the admin center. Microsoft recommends placing the offending ASR rule to “Audit” mode to limit impact on devices.
Ascend Technologies is closely monitoring the issue and will provide updates as they become available. If you have any questions, please reach out to us at: support@teamascend.com