Windows 10, the company says, can block ransomware, even when other antivirus programs fail to protect users and computers. This, Microsoft feels that are worthy of praise.
Of course, the company also recently applauded the 0-day blocking capabilities of its new OS.
Protection against vulnerabilities that are yet to patched.
The latest version of the operating system comes with built-in mitigation technologies that offer users protection in the case of ransomware attacks. And as Tommy Blizard of the Windows Defender ATP Research Team explains, things have now evolved to a whole another level.
In a post on TechNet, he reveals that the Windows Defender Advanced Threat Protection (ATP) in Windows 10 now has the ability to block ransomware — and block it even in cases when antivirus programs fail to do it.
This goes a long way in preventing infections from spreading across networks.
Case in point, Cerber, a widely-known file encrypting threat, can actually be blocked with new technologies that are coming to Windows 10 in the upcoming Creators Update. This new refresh of the OS comes with tools that can detect in-memory malware and kernel-level exploits.
In fact, Creators Update comes with specific improvements to isolate infected machines, thereby providing administrators with more time to block the malware and remove its files from the compromised systems.
It even detected and blocked specific PowerShell commands that were supposed to spread the Cerber infection on a system — even with antivirus protection not running.
Goes to show that the security in Windows is now improving a lot with each big update to the operating system, providing users and companies with even more of an incentive to upgrade to Windows 10.
source:windows10update
