Windows Defender will block malicious and vulnerable drivers

The Windows Defender software built into Windows has received a feature that protects against vulnerable and malicious drivers. Microsoft, together with hardware vendors, has created a blacklist of vulnerable drivers.

Microsoft began to focus on driver security

David Weston, vice president of security at Microsoft, new feature: “New Windows security option: Enable more aggressive block list containing vulnerable drivers.” announced in a tweet. On the other hand, this list was reportedly created together with hardware vendors based on the behavior of software components.

The list includes drivers that exploit vulnerabilities in the system, display malicious behavior, and potentially pose a threat to the system. You can enable the new functionality from the “Core isolation” menu in the Windows Defender security settings as of version 4.18. Microsoft began paying special attention to drive security after it was found that attackers had infected drives with malicious code to gain full access to computers.