Microsoft rolls out Windows security changes to prevent another CrowdStrike meltdown
Briefly

In response to the serious disruptions caused by last summer's CrowdStrike meltdown, Microsoft has introduced new security measures aimed at preventing future incidents. A security summit brought technical experts together to establish Safe Deployment practices and modify Windows architecture. Notably, third-party security drivers will now run in user space instead of the Windows kernel, improving system reliability and recovery. This change follows recommendations from security experts and is expected to significantly enhance the resilience of security products, potentially averting substantial damages in the future.
The new Windows capabilities will allow them to start building their solutions to run outside the Windows kernel, providing reliability and easier recovery.
Last summer's CrowdStrike meltdown caused billions in damages and led to new Safe Deployment practices to prevent similar incidents in the future.
Moving third-party security drivers out of the Windows kernel to user space is a significant change recommended by security experts for system stability.
The security summit convened by Microsoft with CrowdStrike and competitors aimed to address the CrowdStrike meltdown's consequences through updated security practices.
Read at ZDNET
[
|
]