Microsoft suspends KB5007651 updates to Win11, admitting local security agency protection (LSA) error

CTOnews.com March 18, Microsoft released a KB5007651 update for Windows Defender in March this year, which will force users to install it.

However, some users reported that after installing the update, Windows Security displayed "Local Security authority protection is off. Your device may be vulnerable" (local security protection has been turned off. Your device may be attacked.

CTOnews.com mini-class: LSA contains the Local Security Agency Server Service (LSASS) process that authenticates users' local and remote logins and enforces local security policies.

The Windows 8.1 operating system and later provides additional protection for LSA to prevent unprotected processes from reading memory and injecting code. This feature provides greater security for credentials that LSA stores and manages.

Microsoft has now acknowledged these problems and has suspended pushing KB5007651 to users and will resume updates after the issue is resolved.