Microsoft has announced a new package of major improvements to Windows, aiming to offer stronger protection to users and greater transparency into how applications operate within the operating system.
The changes are part of the Secure Future Initiative, which the company unveiled in November 2023, and show its steady shift towards a more "locked down" and secure user environment, especially in an era where cyber threats are rapidly increasing.
"Windows Baseline Security Mode" becomes default
At the center of the announcements is a new feature called Windows Basic Security Mode, which aims to enable runtime integrity safeguards by default.
See also: Microsoft will add Sysmon natively to Windows 11
Simply put, this improvement will ensure that only:
- properly signed applications
- reliable driver programs
- approved services
This significantly reduces the chances of hacking, installation of malicious software or unauthorized changes to the operating system.
Microsoft is attempting to create an environment where executing suspicious or uncertified code becomes much more difficult.
Flexibility for exceptions in special cases
Although the new security stance is stricter, the company recognizes that there are scenarios where exceptions, especially in corporate environments or applications that rely on custom drivers.
For this reason, users and IT administrators will be able to bypass protections when necessary.
As Microsoft notes, developers will also be able to know when protections are active and whether exceptions have been thrown, thus gaining better control over the execution conditions of their applications.
Secure Boot certificate expiration: What users need to know
The announcement came at the same time as an important reminder: Secure Boot certificates will begin to expire in June.
See also: Microsoft: Scanner to detect backdoors in open-weight LLMs
Secure Boot is one of Windows' key defense mechanisms, as it protects the device from the moment it is turned on, preventing unsigned software from running before the operating system even starts.
Microsoft confirmed that the renewed certificates will be distributed to supported versions of Windows, so that users can remain protected without the need for manual intervention.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
More transparency and consent for sensitive operations
Another important step is the introduction of the User Transparency and Consent, which will notify users whenever an application attempts to access sensitive resources, such as:
- system files
- camera
- microphone
- installation of additional software
Microsoft promises that notifications will be clearer and more practical, while users will be able to review their choices later and modify them, gaining more meaningful control.
Higher standards for artificial intelligence applications too
Special mention was also made of AI agents, which are gradually gaining a central role in Windows and productivity applications. Microsoft makes it clear that both applications and AI agents will have to meet stricter transparency standards so that users and IT administrators are better aware of their behaviors within the system.
In a time where AI is being integrated everywhere, the need for clear boundaries and control is considered critical.
See also: Microsoft disables NTLM protocol in Windows
Phased implementation with developer collaboration
Microsoft emphasizes that all of these changes will be implemented gradually, in phases, to allow time for developers and partners to adjust.
Windows will offer tools and APIs that will facilitate the adoption of the new security rules, while existing well-behaved apps will continue to function normally.
The goal is clear: an operating system with stronger defenses, greater transparency, and better privacy controls, without abruptly disrupting the app ecosystem.
The future of Windows is getting more secure
With these announcements, Microsoft shows that it is preparing Windows for a new era, where security will not just be an additional feature, but a core foundation of the user experience.
In a world full of ransomware, phishing, and supply chain attacks, the move to stricter default protections now seems inevitable.
