Zero-hour Auto Purge (ZAP) in Microsoft Defender for Office 365 will now scan and remediate malicious emails in users' Deleted Items folders, enhancing post-delivery protection without new policies. Rollout starts June 2026, affecting all tenants with ZAP enabled, with no user experience changes or required actions.
Applies to: Exchange Online · Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).