Microsoft has become one of the leaders in technological solutions to accommodate companies and workers in the pandemic era. Since the environment shifted to a remote or hybrid model, Microsoft has tailored its products to accommodate the new reality. The latest Windows 11 security updates focus on making the increasingly complex hybrid workflow more secure.
Chip-to-Cloud Protection
Microsoft is uniquely positioned to provide security in its hardware, operating system, and a complete cloud-hosted work environment. The company is taking advantage of its expansive scope by heightening the safety of its endpoints and interactions with applications outside the Microsoft ecosystem. With the new changes, remote workers and employers can be more confident when using Windows, Office, and Teams on multiple devices and internet connections.
Smart App Control
Possibly the most beneficial aspect of the update is Smart App Control. Due to an increase in mobile work by Windows users, Microsoft has decided to add an extra layer of security to monitor 3rd party apps.
Unsecure mobile apps that gather data are prime targets for hackers to obtain sensitive information. According to Symantec, “third-party app stores hosted 99.9% of detected mobile malware, and are therefore the main cause of recent security breaches involving mobile devices.”
With Smart App Control, Windows users are protected beyond the security provided by the app store and browser. The new feature uses code signaling with artificial intelligence to only run processes that are predicted to be safe or certified by the Microsoft Cloud.
New Personal Security Measures
The Windows 11 software update also protects users from themselves by proactively analyzing suspicious activity. In many cases, users willingly give up information or provide credentials to malicious entities online. Building in extra layers of protection will help Windows users keep their personal information safe and reduce threats to their organizations.
Below are the most prominent aspects of the software update regarding personal data security.
Enhanced Phishing Detection
The Microsoft Defender SmartScreen helps protect users from phishing email attacks by identifying and alerting users when entering Microsoft credentials into a suspicious email or website. Windows is the
world’s first operating system
with phishing safeguards built directly into the software.
Default Credential Guard
Windows 11 uses virtualization-based security capabilities built into new hardware to prevent authentication exploitation attempts like pass-the-hash or pass-the-ticket. The system also prevents malware from accessing sensitive information even if a script runs with admin access.
In the future, Credential Guard will default for organizations with an Enterprise account.
Default Local Security Authority
Hackers targeting Windows devices will have a much harder time gaining access due to additional protection from the Local Security Authority (LSA). The new protocols will ensure LSA loads only trusted code.
Personal Data Encryption
Data is protected while users are offline through Windows Personal Data Encryption. Users must authenticate with Windows Hello before data is readable, providing another layer of built-in protection even when a device is lost or stolen.
Config Lock
The new default Config Lock feature monitors registry keys through mobile device management (MDM) policies set by the organization to keep all devices compliant with industry and company security protocols.
Default HVCI
HVCI prevents hackers from injecting malicious code into Microsoft devices. With the help of the security community, the Microsoft Vulnerable and Malicious Driver Reporting Center automatically blocks known vulnerable drivers.
Securing the New Normal
Microsoft has made it clear that it plans to become the premium hybrid work platform. Building applications, software, and tools that enable remote work comes with heightened security risks. The latest version of the Windows operating system proves that Microsoft is taking the necessary security measures to provide safe solutions that are flexible and limit cyber threats.
Want to learn more about cybersecurity and how to stay protected? Check out the Makios blog today!
References: Microsoft,
