Microsoft’s key updates for Windows 11 security include higher AMD and Intel CPU requirements, TPM 2.0 and security features that can be turned on by default without affecting PC performance. Default Windows 11 security features include HVCI, which is enabled by virtualization-based security (VBS).