Microsoft is tightening one of Windows’ oldest trust assumptions, and the fallout could reach far beyond security teams. Beginning with the April 2026 security update, Windows will no longer trust legacy kernel drivers signed through the old cross-signed root program by default on Windows 11...