Latest PowerShell news

Microsoft disrupts nation-state hacker op using Azure Cloud service

In a report today, Microsoft said that it disrupted operations of a nation-state threat group that was using its Azure cloud infrastructure for cyber attacks.
- Ionut Ilascu
- September 25, 2020
- 05:22 AM
- 0
Leak shows Windows 10 2004 could come as 'May 2020 Update'

A PowerShell command has leaked that the name of the upcoming Windows 10 2004 feature update is going to be called the "May 2020 Update" and that the 20H2 version coming after will be codenamed "Manganese".
- Lawrence Abrams
- April 09, 2020
- 12:25 PM
- 1
Microsoft Releases PowerShell 7.0 With New Features, Update Alerts

Microsoft released PowerShell 7.0, the latest version of its cross-platform automation and configuration tool with new features including automatic new version notifications, bug fixes, and improvements.
- Sergiu Gatlan
- March 04, 2020
- 02:14 PM
- 0
Windows BSOD Betrays Cryptominer Hidden in WAV File

The infamous blue screen of death (BSOD) on computers belonging to a company in the medical tech sector was the tell for a malware infection that spread across more than half the network.
- Ionut Ilascu
- January 15, 2020
- 03:34 AM
- 2
FTCode PowerShell Ransomware Resurfaces in Spam Campaign

An old PowerShell ransomware has resurfaced with a vengeance in a spam distribution aimed at Italian recipients. This ransomware is called FTCode and is completely PowerShell based, which means it can encrypt the computer without downloading any additional components.
- Lawrence Abrams
- October 03, 2019
- 02:05 AM
- 11
Fake Office Activation Wizard Docs Used to Spread Emotet Trojan

The Emotet botnet has switched to a new template used by malicious attachments that pretend to be a Microsoft Office Activation Wizard.
- Lawrence Abrams
- October 01, 2019
- 01:08 PM
- 0
Microsoft Explains Why Signed PowerShell Cmdlets May Run Slow

Microsoft issued an advisory that signed PowerShell cmdlets may run slower then unsigned cmdlets if Windows is having network connectivity problems.
- Lawrence Abrams
- September 26, 2019
- 04:39 PM
- 0
Outlook on the Web to Block File Extensions for PowerShell, Python, and More

Microsoft will soon be blocking an additional 38 file extension from being downloaded as attachments in Outlook on the Web in order to protect users from malicious files. These additional extensions includes files used by Java, PowerShell, Python, and various vulnerabilities.
- Lawrence Abrams
- September 26, 2019
- 07:29 AM
- 0
Microsoft Rolls Out Windows Terminal 1909 With Long List of Fixes

Microsoft is rolling out the September 2019 release (1909) of its multi-tabbed Windows Terminal console app with a new settings schema, a new font, stylus support, and Windows 20H1 Console Windows Host (conhost) bug fixes.
- Sergiu Gatlan
- September 24, 2019
- 03:52 PM
- 0
Get 96% off The Microsoft PowerShell Certification Bundle Deal

This deal is for a 3 course bundle that teaches you how to use Microsoft's PowerShell to automate tasks in Windows. From basic to more advanced techniques, these courses will have you using PowerShell to manage users in Active Directory, automating administrative tasks on files, services, and applications, and interact with databases
- BleepingComputer Deals
- August 16, 2019
- 09:05 AM
- 0
How to Get a List of Installed Windows 10 Updates

Windows 10 cumulative updates are released at least twice every month, and the updates include both security and non-security fixes. In this Windows 10 guide, we will explain steps to find out if a Windows 10 Update is installed correctly.
- Mayank Parmar
- July 21, 2019
- 03:04 PM
- 0
Microsoft Launches Multi-Shell Windows Terminal Console App

At the Build 2019 conference, Microsoft has unveiled its new modern console for Windows 10 called Windows Terminal, which includes tabbed support, GPU acceleration, syntax highlighting, and more.
- Lawrence Abrams
- May 06, 2019
- 04:12 PM
- 0
Malware Spreads As a Worm, Uses Cryptojacking Module to Mine for Monero

A modular malware with worm capabilities exploits known vulnerabilities in servers running ElasticSearch, Hadoop, Redis, Spring, Weblogic, ThinkPHP, and SqlServer to spread from one server to another and mine for Monero cryptocurrency.
- Sergiu Gatlan
- March 12, 2019
- 12:32 PM
- 0
Windows Security Patch Breaks PowerShell Remoting

Windows PowerShell and PowerShell Core 6 (PSCore6) WinRM based remoting have been broken for a specific PowerShell remoting scenario by Microsoft's CVE-2019-0543 security patch released on January 8
- Sergiu Gatlan
- January 15, 2019
- 08:13 AM
- 0
Microsoft Office 365 Customers Get Protection Against Malicious Macros

Microsoft extends support for its Antimalware Scan Interface (AMSI) to Office 365 client applications, offering protection against script-based threats at runtime.
- Ionut Ilascu
- September 14, 2018
- 05:35 PM
- 0
Python May Let Security Tools See What Operations the Runtime Is Performing

A new feature proposal for the Python programming language wants to add "transparency" to the runtime and let security and auditing tools view when Python may be running potentially dangerous operations.
- Catalin Cimpanu
- May 28, 2018
- 05:22 AM
- 0
Windows CLI Apps Vulnerable to New Ctrl-Inject Process Injection Attack

Rotem Kerner, a security researcher with enSilo, has discovered a new process injection technique that can be abused by malicious actors to hide malware inside Windows-based CLI applications.
- Catalin Cimpanu
- May 09, 2018
- 12:06 PM
- 0
PSA: Beware of Windows PowerShell Credential Request Prompts

A new PowerShell script was posted on Github recently that prompts a victim to enter their login credentials, checks if they are correct, and then sends the credentials to a remote server. This allows an attacker to distribute the script and harvest domain login credentials from their victims.
- Lawrence Abrams
- March 14, 2018
- 04:46 PM
- 9
Null Character Bug Lets Malware Bypass Windows 10 Anti-Malware Scan Interface

Malware that embeds a null character in its code can bypass security scans performed by the Anti-Malware Scan Interface (AMSI) on Windows 10 boxes.
- Catalin Cimpanu
- February 19, 2018
- 10:01 AM
- 0
PowerPoint File Downloads Malware When You Hover a Link, No Macros Required

Security researchers have spotted a booby-trapped PowerPoint file that will download malware to a computer whenever a victim hovers a link, no macro scripts required.
- Catalin Cimpanu
- June 02, 2017
- 12:40 PM
- 0