Beyond Identity incident
Platform Authenticator v2.106 Quarantined by Windows Defender
Beyond Identity experienced a notice incident on August 4, 2025, lasting 1d 8h. The incident has been resolved; the full update timeline is below.
Update timeline
- investigating Aug 04, 2025, 01:40 PM UTC
Beyond Identity is aware of and investigating an issue with the latest Platform Authenticator (version 2.106) being quarantined by the latest version of Microsoft Windows Defender.
- investigating Aug 04, 2025, 03:31 PM UTC
We continue to investigate the issue and we have paused downloads of both the EXE and MSI variants of the Platform Authenticator version 2.106.0-5 installer for Windows. We have opened support cases with Microsoft to investigate the flagging of these installers.
- identified Aug 04, 2025, 08:05 PM UTC
Microsoft has confirmed that the files previously flagged by Defender were false positives. Updated definitions are currently being propagated across their systems and are expected to be fully deployed within the next 12 hours. Once we are confident that the Microsoft Defender security definitions have completely propagated, we will re-enable downloads of the latest Windows Platform Authenticator. The currently available version, 2.104.0, is available for download. We appreciate your patience and will provide another update once we have confidence that the security definitions have propagated.
- identified Aug 04, 2025, 08:50 PM UTC
We are continuing to work on a fix for this issue.
- resolved Aug 05, 2025, 10:14 PM UTC
We have validated that Microsoft's fix for incorrectly flagging our Platform Authenticator installers has been released and propagated. Downloads for 2.106 will be re-enabled on Wednesday, August 6th.