LockdownLoadImage mitigation to applications under the Office protection category mitigates e.g. Keystroke Encryption and BadUSB Protection which caused a BSOD (APC_INDEX_MISMATCH) on Windows 11 with update KB5013943 unexpected removal of Forza Horizon 5 under UWP exclusions tray icon burning CPU cycles after install issue when a user tries to install HitmanPro.Alert on machine where Sophos Home Premium is already installed

issue with Lockdown inheritance when parent process is OpenWith.exe false alarm by HollowProcess on Visual Studio false alarm by CookieGuard if application starts from a RAM-drive false alarm by APCViolation on Avast 'aswhook' DLL a compatibility issue between our anti-ransomware CryptoGuard 5 and Artisan scrapping book software from Forever Storage issue that prevented restarting of some protected applications when using the 'restart' function from the ApplicationPanel (Running applications) when changing a setting. Sophos Privacy Notice and Terms of Service text for Benefits button to Help center Dynamic Heap Spray detection it is now disabled on 64-bit applications reboot fly-out reminder interval from 1h to 8h the per app mitigation settings in the user interface. Lockdown mitigation to isolate modules (DLLs) dropped in attacks via Office documents. HollowProcess to protect against PEB manipulation in a remote process where PEB is writable Previously, the offending action was only blocked. WipeGuard to terminate the offending process. Previously, only the boot partition was protected. WipeGuard to protection the Volume Boot Record of all mounted partitions. CookieGuard so it now adds certificate validation information into the alert details

CookieGuard alert with information about the application certificate, if any, in the alert handling of certificates on code-signed applications protection against direct system calls, or SysCall, on 32-bit applications EA Digital Illusions CE AB to game detection alerting to our protection of sticky key abuse (and other accessibility features) MITRE ATT&CK references to the CookieGuard, SysCall and RemoteThreadGuard mitigations support for ReFS file system to CryptoGuard protection against cloning of LSASS process to Credential Theft Protection system-wide protection against 'Hell's Gate' defense evasion via direct system calls, or SysCall, on 64-bit applications Change log not available for this version Fixed HollowProcess incompatibility with PC-Matic/Pitstop

Download hitmanpro alert 3.8.18