How Microsoft is Helping to Protect Hybrid Work

IT companies in South Africa can breathe a sigh of relief with significant security updates from Microsoft for Windows 11, designed to add further protection from the chip to the cloud. The more robust protection provided by secured-core PCs has enabled Microsoft to do this.

Benefits of Secured-Core PCs

• Enable secure booting
• Protect devices from firmware vulnerabilities,
• Protect operating system from attacks
• Prevent unauthorised access to devices and data

In 2021, Microsoft built additional protection into Azure, MS 365, Azure, and MS Defender for Officer 365. This extra protection blocked more than 9.6 billion malware threats, more than 35.7 billion phishing and other malicious emails, and 25.6 billion attempts to hijack enterprise customers. This has given Microsoft an accurate idea of what users need to protect themselves from threats in whatever manner they choose to work.

With this knowledge and experience, Microsoft is adding additional protection in 2022 for applications, personal data, and devices. Furthermore, IT technicians will have the ability to lock security configurations.

What’s New with Windows 11 in 2022?

Other security developments from Microsoft for this year include the following:

Zero Trust Security with Microsoft Pluton

Zero Trust is a security framework that requires any user to be authenticated and continuously validated before being granted or retaining access to applications and data. This helps protect the user’s credentials and the core parts of the operating system (OS) as soon as the device powers up. Microsoft Pluton is the only security processor regularly kept up to date with crucial security and functionality updates coming through Windows Update and does not require IT technicians to update the firmware manually. Furthermore, Pluton has been configured to work optimally with Windows 11 for improved reliability and performance.

Smart App Control without the App Store

Another significant enhancement that prevents malicious applications from running on Windows devices is Microsoft’s Smart App Control which uses code signing and Artificial Intelligence (AI) to allow only processes that are predicted to be safe to run.

Enhanced Phishing Protection with Microsoft Defender SmartScreen

This enhanced phishing protection system built-in Windows uses Microsoft Defender SmartScreen to identify and alert users about malicious applications or websites that have been hacked.

Credential Guard on Windows 11 Enterprise Edition

This capability will be enabled by default for users on the enterprise edition of Windows 11 to prevent malware from accessing confidential data and protect systems from theft of credentials.

Verification of User ID

The Local Security Authority (LSA) is responsible for authenticating and verifying credentials and logins, but attackers have developed tools to override this process and steal credentials. Therefore, Microsoft has enabled additional LSA protection by default for Windows 11 enterprise edition to prevent this.

In addition to the above innovations, Microsoft has also added Personal Data Encryption to protect user files and data when the user is not signed into their device, and Config Lock to protect users from themselves by assisting IT technicians to ensure that all devices comply with company security policies. Hypervisor-Protected Code Integrity (HVCI), which will be enabled in the next Windows 11 release, will prevent malicious code from being injected by hackers and ensure the integrity of drivers on the OS. Furthermore, persistent threats and ransomware attacks are stopped by a kernel blocklisting feature.

As a leading IT company in South Africa, Westech is confident that Microsoft’s continuous attention to and investment in improved security releases for Windows will narrow the gaps used by cyber attackers and meet any new security challenges in the hybrid workplace.

Contact Westech for your edition of Microsoft’s Enterprise Software Package.