Latest / The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations
Windows 11 Enterprise Quietly Mandates Secure DMA Protection
Microsoft is adding a new security requirement to Windows 11 Enterprise: Secure DMA (Direct Memory Access) protection must be enabled on all devices with Thunderbolt or USB4 ports. This prevents DMA attacks where a malicious device plugged into a port reads sensitive memory. Lucas explains how the change works, why IT admins need to audit hardware now, and what happens if a device doesn't meet the new baseline. Luna brings a real-world case: the 2019 Thunderclap vulnerability that exposed millions of machines. The hosts break down the phased rollout in Windows 11 24H2 and 25H2, the difference…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.