Adding new recommendations

Author: limwainstein

defender-vulnerability-management/whats-new-in-microsoft-defender-vulnerability-management.md

@@ -24,10 +24,13 @@ This article provides information about new features and important product updat
 ## November 2025
 
 - (Preview) **Microsoft Secure Score now includes new recommendations** to help organizations proactively prevent common endpoint attack techniques.
+    - **Require LDAP client signing** and **Require LDAP server signing** - helps ensure integrity of directory requests so attackers can't tamper with or manipulate group memberships or permissions in transit.
+    - **Encrypt LDAP client traffic** - prevents exposure of credentials and sensitive user information by enforcing encrypted communication instead of clear-text LDAP.
+    - **Enforce LDAP channel binding** - stops adversaries from hijacking or relaying authentication sessions by binding New Technology LAN Manager (NTLM) authentication to a secure TLS channel.
 - (GA) These Microsoft Secure Score recommendations are now generally available: 
-    - **Block web shell creation on servers**.
-    - **Block use of copied or impersonated system tools**.
-    - **Block rebooting a machine in Safe Mode**.
+    - **Block web shell creation on servers**
+    - **Block use of copied or impersonated system tools**
+    - **Block rebooting a machine in Safe Mode**
 
 ## October 2025