Despite advances in malware protection, endpoints get infected every day. Anti-virus companies employing hypervisors, virtualization containers and sandboxing at endpoints to keep malware away from files and off the network. These programs specifically protect those very areas that most antivirus has trouble with, sealing a hole that malware had used for years to infect even secure endpoints. Even though antivirus companies have acknowledged that their software cant catch everything, they admit that they can’t catch everything.”]
Source: https://www.csoonline.com/article/2941306/review-breakthroughs-in-endpoint-security.html