Microsoft’s Kernel Conundrum: Can New Security Measures Prevent Another CrowdStrike Catastrophe?

Microsoft is working to allow endpoint security solutions to operate outside the Windows kernel to prevent future mega-outages. This change responds to demands from customers and vendors, addressing issues like performance needs and anti-tampering protections. The move follows the CrowdStrike outage, which highlighted the risks…

Hot Take:

Microsoft’s grand plan to keep security solutions out of Windows’ kernel is like trying to keep a cat out of a box – it’s a valiant effort, but that feline is going to find a way in if it really wants to. At least this time, Windows won’t be left with 8.5 million bricked PCs. Thank you, CrowdStrike, for the cautionary tale!

Key Points:

  • Microsoft is working to allow endpoint security solutions to operate outside the OS kernel.
  • Performance and anti-tampering protections are key challenges to address.
  • Summit attendees, including major security vendors, supported the initiative.
  • July’s CrowdStrike outage highlighted the risks of kernel-level access for security products.
  • Microsoft aims to collaborate with security vendors on safe update deployment practices.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here