Windows 11 is Microsoft's desktop operating system, whose updates, security controls, and flaws affect the protection of PCs and their data.
Search across headline titles and summaries.
Background for this topic.
Windows 11 is Microsoft’s desktop operating system for personal computers and organizational endpoints. Its security model can use hardware-backed protections such as TPM 2.0 and Secure Boot, while virtualization-based security (VBS), credential isolation, Microsoft Defender, and Windows Hello help protect the boot process, credentials, and user sessions. These controls depend on compatible hardware, enabled policies, and correctly configured drivers and applications; they are not automatic protection against every attack.
For security teams, Windows 11 is a major vulnerability-management and endpoint-monitoring scope. Monthly updates address flaws that may enable privilege escalation, remote code execution, or security-control bypass, while third-party software, kernel drivers, and misconfigured services add attack surface. Organizations should maintain supported builds, test and deploy patches, verify Secure Boot and VBS posture, protect recovery and administrator credentials, and retain telemetry useful for detecting persistence or lateral movement. Hardware and configuration differences also matter when assessing exposure and forensic evidence.
Microsoft released an emergency security update for the Windows 10 and Windows 11 Snipping tool to fix the Acropalypse privacy vulnerability. [...]
On the third day of the Pwn2Own hacking contest, security researchers were awarded $185,000 after demonstrating 5 zero-day exploits targeting Windows 11, Ubuntu Desktop, and the VMware Workstation virtualization software. [...]
Microsoft announced that the new Windows 11 build rolling out to Insiders in the Canary channel comes with increased protection against phishing attacks and support for SHA-3 cryptographic hash functions. [...]
Microsoft is testing an updated version of the Windows 11 Snipping Tool that fixes a recently disclosed 'Acropalypse' privacy flaw that allows the partial restoration of cropped images. [...]
On the first day of Pwn2Own Vancouver 2023, security researchers successfully demoed Tesla Model 3, Windows 11, and macOS zero-day exploits and exploit chains to win $375,000 and a Tesla Model 3. [...]
Microsoft has released a new Windows 11 preview build that adds a new dedicated USB4 settings page and support for displaying seconds in the system tray clock. [...]
Microsoft says the KB5007651 Microsoft Defender Antivirus update triggers Windows Security warnings on Windows 11 systems saying that Local Security Authority (LSA) Protection is off. [...]
A severe privacy flaw named 'acropalypse' has also been found to affect the Windows Snipping Tool, allowing people to partially recover content that was edited out of an image. [...]
Mozilla has addressed issues causing Firefox to crash on macOS and to freeze with a non-responding blank window when starting on Windows 11 systems. [...]
Mozilla has addressed a known issue causing the Firefox web browser to freeze on startup on Windows 11 systems after installing the KB5023706 March 2023 cumulative update. [...]
Windows 11 users report seeing widespread Windows Security warnings that Local Security Authority (LSA) Protection has been disabled even though it shows as being toggled on. [...]