MICROSOFT IS BUILDING NEW WINDOWS SECURITY FEATURES TO PREVENT ANOTHER CROWDSTRIKE INCIDENT

Summary from the TLDR InfoSec newsletter

In the wake of the disastrous CrowdStrike outage, Microsoft met with industry leaders to discuss security features that could be added to Windows to enable endpoint security vendors to move their products out of the kernel. Many vendors championed this as a productive endeavor and appreciated the collaboration from Microsoft. Others, like Cloudflare CEO Matthew Prince, cautioned the move as potentially leading to an unfair market where only Microsoft has access to the kernel. Microsoft has not mentioned locking vendors out of the kernel since 2006.