Introduction
With the release of Windows 12 and macOS 14 later this year, I am excited to learn about the new security features Microsoft and Apple have implemented. As threats become more sophisticated, it’s essential that our devices and data remain protected. In this article, I’ll provide an in-depth look at the enhanced security capabilities of these upcoming operating systems.
Windows 12 Security
Improved Ransomware Protection
Ransomware continues to be one of the most disruptive threats facing consumers and businesses. Windows 12 introduces new safeguards to prevent ransomware from encrypting files and holding systems hostage.
-
Controlled folder access has been enhanced to better detect ransomware activity and quickly restore affected files. This blocks unauthorized apps from making changes to files in protected folders.
-
A new “emergency recovery” mode allows recovering files encrypted by ransomware. This provides a crucial last line of defense if other protections fail.
-
Notifications will alert users if ransomware is detected and attempt to block it from running. This increases awareness of attacks.
With these improvements, Windows 12 aims to minimize ransomware’s impact and reduce downtime caused by such attacks.
Secured-Core PC Capabilities
New high-security requirements for Secured-Core PCs ensure these devices offer the strongest protection against sophisticated threats. To receive Secured-Core certification, PCs must include:
-
Hardware-based isolation of critical processes and data from the operating system. This prevents threats from compromising sensitive information.
-
Secure boot and measured boot capabilities to validate firmware, OS, and software integrity. Any tampering can be detected.
-
System guard runtime attestation to confirm hardware/software haven’t been compromised while powered on.
By mandating these security capabilities, Secured-Core PCs will provide the utmost resilience against advanced attacks that target firmware and the supply chain.
Virtualization-Based Security
Virtualization-Based Security (VBS) leverages hypervisor technology to better isolate and protect critical OS components:
-
The new HVCI (Hypervisor-protected code integrity) feature will monitor kernel-mode processes, drivers, and code for signs of exploitation. This prevents attackers from running malicious code in the kernel.
-
VBS now includes Driver compatibility so users don’t need to disable it for incompatible drivers. This increases adoption of VBS for enhanced system integrity.
-
Credential Guard uses virtualization to isolate secrets so only privileged system software can access them. Defending credentials enhances identity protection.
By isolating and protecting critical OS components with virtualization, VBS will strengthen system security in Windows 12.
macOS 14 Security
Passkeys
macOS 14 introduces passkeys – a more secure replacement for passwords when signing into websites and apps.
-
Passkeys use public key cryptography instead of passwords that can be phished or stolen. This better protects against credential theft.
-
They are synced across devices using iCloud Keychain and Apple’s end-to-end encryption. Convenient access without compromising security.
-
Biometric authentication via Touch ID or Face ID is required to use a passkey on Apple devices. This provides an additional layer of protection.
Eliminating vulnerable passwords with passkeys will significantly improve account security on Apple devices.
Rapid Security Response
A new Rapid Security Response system in macOS 14 enables Apple to quickly rollout urgent security fixes:
-
It allows patching security vulnerabilities without requiring a full OS update. Critical fixes can be deployed rapidly.
-
Fixes are applied using signed and encrypted updates over the Internet to ensure their authenticity and prevent tampering.
-
User notifications will prompt users to reboot their device to apply updates. Rebooting is the only action required.
The ability to quickly deploy focused security patches improves response time and keeps Macs safer between major updates.
Lockdown Mode
For users like journalists and activists facing sophisticated cyberattacks, macOS 14 offers a new optional Lockdown Mode:
-
It disables complex web technologies like just-in-time (JIT) JavaScript compilation that are often exploited in zero-day attacks. This increases web browsing safety.
-
Incoming invitations and service requests like FaceTime calls are blocked if the user has not previously sent the initiator a call or request. This prevents spam and abuse.
-
Most message attachments are blocked aside from images. Combined with disabling web preview, this prevents infection vectors.
While limiting functionality, Lockdown Mode provides an extreme level of protection for at-risk users facing targeted attacks.
The Road Ahead
With substantial security improvements in Windows 12 and macOS 14, Microsoft and Apple are demonstrating their commitment to enhancing OS security. As threats evolve, it’s encouraging to see continued innovation in hardening consumer devices and data. While no system is impenetrable, these latest versions push us one step closer to that ideal. As the releases approach later this year, I’m eager to take these new security capabilities for a spin.
