Windows 10’s built-in antivirus can now run in a sandbox. Even if an attacker compromises the antivirus engine, they wouldn’t have access to the rest of the system. As Google’s Tavis Ormandy puts it, “this is game changing.”
More: Windows Defender Now Offers Ultra Secure Sandbox Mode, Here’s How To Turn It On