Windows 11 is Microsoft's desktop operating system, whose updates, security controls, and flaws affect the protection of PCs and their data.
Search across headline titles and summaries.
Background for this topic.
Windows 11 is Microsoft’s desktop operating system for personal computers and organizational endpoints. Its security model can use hardware-backed protections such as TPM 2.0 and Secure Boot, while virtualization-based security (VBS), credential isolation, Microsoft Defender, and Windows Hello help protect the boot process, credentials, and user sessions. These controls depend on compatible hardware, enabled policies, and correctly configured drivers and applications; they are not automatic protection against every attack.
For security teams, Windows 11 is a major vulnerability-management and endpoint-monitoring scope. Monthly updates address flaws that may enable privilege escalation, remote code execution, or security-control bypass, while third-party software, kernel drivers, and misconfigured services add attack surface. Organizations should maintain supported builds, test and deploy patches, verify Secure Boot and VBS posture, protect recovery and administrator credentials, and retain telemetry useful for detecting persistence or lateral movement. Hardware and configuration differences also matter when assessing exposure and forensic evidence.
Microsoft has started testing ads in the Windows 11 Start menu, a new experiment the company says will help users find new "great" apps in the Microsoft Store. [...]
Microsoft has released the KB5036893 cumulative update for Windows 11 23H3, which includes 29 changes and fixes and enables the Moment 5 features for every user. [...]
Windows 11 24H2 is set to arrive on existing devices this fall with several new features, mostly Copilot-related improvements. [...]
Microsoft is now using a Windows driver to prevent users from changing the Windows 10 and Windows 11 default browser manually or through software. [...]