diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-black-bug-icon.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-black-bug-icon.png
new file mode 100644
index 0000000000..33cf4ffe61
Binary files /dev/null and b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-black-bug-icon.png differ
diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md
index 0fe724f320..bd1b02dd76 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md
@@ -90,7 +90,7 @@ The two large numbers at the top of the page show the number of new vulnerabilit
 
 The following icons show up next to events:
 
-- ![bug icon](images/tvm_bug_icon.png) New public exploit
+- ![bug icon](images/tvm-black-bug-icon.png) New public exploit
 - ![report warning icon](images/report-warning-icon.png) New vulnerability was published
 - ![exploit kit](images/bug-lightning-icon2.png) Exploit found in exploit kit
 - ![bug icon](images/bug-caution-icon2.png) Exploit verified