Microsoft is moving antivirus providers out of the Windows kernel
Briefly

In response to a significant incident caused by a faulty CrowdStrike update last year, Microsoft is set to test changes to Windows that will improve security by moving antivirus and endpoint detection applications from the Windows kernel. Collaborating with various security vendors, including CrowdStrike, Microsoft seeks to establish a unified endpoint security platform through collective input, prioritizing collaboration over unilateral decisions, ensuring that the system meets the industry's evolving needs.
We've had dozens of partners supply papers to us, some of them hundreds of pages long, on how they'd like it to be designed and what the requirements are.
We're not here to tell them how the API should work, we're here to listen and provide the security and reliability.
Read at The Verge
[
|
]