Aqua Security says PowerShell issue can allow attacks involving registration of malicious packages with names similar to existing popular package names when developers make mistakes. Researchers are ...

So you've built that great PowerShell module, and it's been saving you tons of time. Awesome! But, you're running into a problem: distribution. You may start by just using the module on your local ...

Microsoft's PowerShell Gallery presents a software supply chain risk because of its relatively weak protections against attackers who want to upload malicious packages to the online repository, ...

For the longest time, the open source community had a ubiquitous concept called "public package repositories." Using utilities such as rpm, yum et al. is commonplace, but Microsoft never had the same ...

Lax policies for package naming on Microsoft’s PowerShell Gallery code repository allow threat actors to perform typosquatting attacks, spoof popular packages and potentially lay the ground for ...

If you're still writing custom PowerShell scripts for basic file transfers and Excel reports, you're working too hard. Ready-made PowerShell modules handle most common tasks better than anything ...

New guidance shows how to harden PowerShell and make it more difficult for threat actors to hijack for malicious purposes. Living off the land is not the title of a gardening book. It’s the goal of ...

PowerShell 7 is here and there's a lot to get excited about for IT pros, even if your experience with the automation tool is limited. Redmond: How much of an improvement is PowerShell 7 over the ...