Microsoft Defender is getting a useful upgrade to help stop endpoint attacks

• Microsoft is testing new features for Defender for Endpoint
• The features will block traffic from and to undiscovered endpoints
• The goal is to minimize malicious lateral movement

Microsoft wants to minimize the risk of undiscovered endpoints by adding a new feature to its Defender for Endpoint product, which will automatically block all traffic to and from such devices.

Such devices are a major security risk because they can bypass monitoring, lack security controls, and potentially serve as entry points for cyberattacks or data exfiltration.