Windows Autopatch will keep Windows and Office software on enrolled endpoints up-to-date automatically

Microsoft is enabling by default the Microsoft Defender 'Attack Surface Reduction' security rule to block attackers from stealing Windows credentials from the LSASS process.