Early tests on Insider builds show that searches may execute roughly twice as fast as with the previous method.

A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.