New Windows 11 features strengthen security to address evolving cyberthreat landscape

Microsoft details a broad set of Windows 11 and Copilot+ PC security enhancements designed to be secure by design and default, including making Secured-core and Pluton standard, enabling Windows Hello Enhanced Sign-in Security, defaulting LSA protection for consumers, deprecating NTLM, advancing key protection and credential isolation with VBS, and hardening Windows Hello. Additional measures include Smart App Control with AI, Trusted Signing, Win32 app isolation, just-in-time admin approvals, VBS enclaves for developers, Windows Protected Print, tooltip handling hardening, stronger TLS (2048-bit minimum), Config Refresh, stricter Firewall CSP behavior, Personal Data Encryption, and Zero Trust DNS.