Windows Security app improvements now include Protection history, including detailed and easier-to-understand information about threats and available actions, Controlled Folder Access blocks are now in the Protection history, Windows Defender Offline Scanning tool actions, and any pending recommendations.
BitLocker and Mobile Device Management (MDM) with Azure Active Directory work together to protect your devices from accidental password disclosure. Now, a new key-rolling feature securely rotates recovery passwords on MDM-managed devices. The feature is activated whenever Microsoft Intune/MDM tools or a recovery password is used to unlock a BitLocker-protected drive. As a result, the recovery password will be better protected when users manually unlock a BitLocker drive.
Attack surface area reduction – IT admins can configure devices with advanced web protection that enables them to define allow and deny lists for specific URLs and IP addresses. Next-generation protection – Controls have been extended to protect from ransomware, credential misuse, and attacks that are transmitted through removable storage.
