Windows Security Compromised by EU Agreement, Says Microsoft

Microsoft has pointed to a 2009 agreement with the European Commission as the reason it struggles to bolster Windows security. This deal was created to ensure equitable competition among security software providers. Microsoft chief of communications raised the point on X/Twitter amid the fallout of a mass BSOD outbreak related to a CrowdStrike update issue.  The 2009 Agreement and Its Implications The agreement came after a regulatory complaint that led to Microsoft agreeing to provide the same level of access to third-party security software developers as it did to its own security solutions. The aim was to give these companies the tools needed to compete on a fair ground. from the article: A Microsoft spokesman said it cannot legally wall off its operating system in the same way Apple does because of an understanding it reached with the European Commission following a complaint. In 2009, Microsoft agreed it would give makers of security software… — Frank X. Shaw (@fxshaw) July 21, 2024 However, this move has led to unintended vulnerabilities. A notable incident last week involved CrowdStrike, where an erroneous security update caused an outage impacting 8.5 million Windows PCs. Microsoft has since addressed this with an automated fix, but the episode illustrates the risks that have emerged from the 2009 settlement. Documentation and Transparency Details of the agreement can be found in a document on Microsoft’s website. This outlines Microsoft’s mandate to share its APIs with third-party security vendors just as it does internally. While designed for transparency and fairness, this has inadvertently introduced potential security weaknesses. The EU has been vigilant about monopolistic behaviors amongst tech giants. Even though reducing Microsoft’s control over Windows might help security, it seems improbable that the EU will ease these regulations. Their primary concern remains ensuring a competitive market landscape.