I had already tried "%programfiles%\windows defender\mpcmdrun.exe" -signatureupdate -http in the past but Nod still reported that the KB is required.
Both printers have the latest drivers from the respective manufacturers. Device manager says "Best drivers for your device are already installed"
Nod32 has been great a spotting other device drivers such as Intel chipset and motherboard resources that have updates available from Microsoft. I would not want to turn off it's notifications for MS updates.
I have Nod on a few PCs. They all show the same symptoms.