{"id":131671,"date":"2023-09-26T10:00:00","date_gmt":"2023-09-26T17:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=131671"},"modified":"2024-09-12T14:09:38","modified_gmt":"2024-09-12T21:09:38","slug":"new-security-features-in-windows-11-protect-users-and-empower-it","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/09\/26\/new-security-features-in-windows-11-protect-users-and-empower-it\/","title":{"rendered":"New security features in Windows 11 protect users and empower IT"},"content":{"rendered":"\n

While attacks are getting more sophisticated, so are our defenses. With recent innovations like secured-core PCs that are 60 percent more resilient to malware than non-secured-core PCs,1<\/sup> and the Microsoft Pluton Security Processor that adds more protection by isolating sensitive data like credentials and encryption keys, Windows 11<\/a> has elevated the security bar for all. Our goal is to protect organizations by simplifying security, building in stronger protections from the chip to the cloud.<\/p>\n\n\n\n

From more secure and easy-to-use authentication with multifactor authentication<\/a> to adding extra layers of protection for applications and data, we\u2019ve simplified and enabled more security features by default than ever before with Windows 11. These features are designed to help stop attacks we\u2019re seeing now as well the more sophisticated and targeted attacks that we expect to become more mainstream in the future. We have also begun to adopt memory-safe languages like Rust, starting with using Rust code for two traditional attack targets\u2014Font Parsing and Win32k Kernel.<\/p>\n\n\n\n

When we launched Windows 11 it came with new hardware and software features like\u202fsecure boot, virtualization-based security, hypervisor-protected code integrity, and Windows Hello using the Trusted Platform Module (TPM) on by default\u202fin many regions. Since\u202fturning those features on, organizations have reported a 58 percent reduction in security incidents, and a three times reduction in firmware attacks\u2014a highly attractive and lucrative target<\/a> for attackers. Our data shows that 83 percent of Windows 11 devices use three or more security features. <\/p>\n\n\n\n

We\u2019re excited to take the next step on this journey with updates for security and IT professionals available today and on by default for new installs of Windows 11.<\/p>\n\n\n

\n\t
\n\t\t
\n\n\t\t\t\n\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

New Windows 11 security features<\/h2>\n\n\t\t\t\t\t
\n\t\t\t\t\t\t

Windows\u00a011 features give you the power to create, collaborate, and keep your stuff protected.<\/p>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tLearn more<\/span>\n\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\"Side\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n

The next step towards eliminating passwords entirely<\/h2>\n\n\n\n

Microsoft global threat intelligence processes more than 65 trillion security signals every day<\/a>. That intel has shown us there are more than 4,000 password attacks every second<\/strong>.2<\/sup> <\/strong>Everyday cybercriminals as well as nation-state attackers like Peach Sandstorm<\/a> are leveraging password spray attacks to compromise high-value targets in sectors like satellite, defense, and pharmaceuticals. Organizations can reduce their risk of compromise to these kinds of attacks with Windows passwordless authentication<\/a> and multifactor authentication features that offer more protection than traditional passwords.<\/p>\n\n\n\n

Passkeys make passwordless easier and more universal<\/strong>: Windows 11 will make it much harder for hackers who exploit stolen passwords through phishing attacks by empowering users to replace passwords with passkeys. Passkeys are the cross-platform future of secure sign-in management. Microsoft and other technology leaders are promoting passkeys as part of the FIDO Alliance. A passkey<\/a> creates a unique, unguessable cryptographic credential that is securely stored on your device. Instead of using a username and password to access a website or application, Windows 11 users will be able to use and protect passkeys using Windows Hello or Windows Hello for Business, or their phone. This will allow users to access the site or app using their face, fingerprint, or device PIN. Passkeys on Windows 11 will work on multiple browsers including Microsoft Edge, Google Chrome, Firefox, and others. Setting up a passkey in Windows is accomplished by:<\/p>\n\n\n\n