security sandbox

Microsoft’s engineers have quietly opened a new front in OS-level security with LiteBox, a Rust‑based “library OS” designed to shrink the exposed surface between running code and the host system so dramatically that entire classes of kernel‑exposed attack vectors become far harder to exploit...