{"id":57755,"date":"2024-11-25T19:15:11","date_gmt":"2024-11-25T19:15:11","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/security-weve-heard-of-it-how-microsoft-plans-to-better-defend-windows\/"},"modified":"2024-11-25T19:15:11","modified_gmt":"2024-11-25T19:15:11","slug":"security-weve-heard-of-it-how-microsoft-plans-to-better-defend-windows","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/security-weve-heard-of-it-how-microsoft-plans-to-better-defend-windows\/","title":{"rendered":"Security? We’ve heard of it: How Microsoft plans to better defend Windows"},"content":{"rendered":"

IGNITE<\/span> The sound of cyber security professionals spraying their screens with coffee could be heard this week as Microsoft claimed, “security is our top priority,” as it talked up its Secure Future Initiative (SFI) once again and explained how Windows could be secured.<\/p>\n

In a post<\/a> that did not mention the word “CrowdStrike” and instead referred to “learnings from the incident we saw in July,” Microsoft introduced the “Windows Resiliency Initiative” or, as administrators still in therapy after that particular July incident might describe it, “nailing jelly to a wall.”<\/p>\n

As well as taking lessons from the CrowdStrike incident<\/a>, in which millions of Windows devices were left hopelessly broken by a malformed update from a security vendor, Microsoft has said areas of focus include enabling more apps and users to run without administrative privileges, stronger controls for what apps and drivers are allowed to run, and improved identity protection to prevent phishing attacks.<\/p>\n