Admins may see device-related alerts automatically resolving in the Microsoft Defender portal

Title: Admins may see device-related alerts automatically resolving in the Microsoft Defender portal
User impact: Admins may have seen that device-related alerts were automatically resolved in the Microsoft Defender portal.
More info: Affected alerts were viewed within the Incidents and Alerts page.
Final status: Our monitoring has identified that some device related alerts were automatically marked as resolved. Our investigation found that a recent service update to improve efficiency contained a code error, resulting in impact. We’ve reverted the impacting update and confirmed that this issue has been remediated via telemetry and internal testing.
We’ve determined that resending the alerts would have a more significant impact so we advise that admins check any device-related alerts generated during the impact window.
Scope of impact: Any admin may have seen device-related alerts show up as automatically resolved in the Microsoft Defender portal.
Start time: Sunday, January 14, 2024, at 9:00 AM UTC
End time: Tuesday, January 16, 2024, at 2:30 PM UTC
Root cause: A recent service update intended to improve efficiency contained a code error, resulting in impact.
Next steps:
– We’re reviewing the specifics of the impacting update to better identify similar issues during our validation procedures and prevent these issues in the future.
This is the final update for the event.