Flipboard

40 posts35 participants6 posts today

AndrewPlaTechI caught up with first-time attendee, Lucas, about their biggest takeaway from <a href="https://techhub.social/tags/PSHSummit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PSHSummit</a> 2025 so far<a href="https://techhub.social/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://techhub.social/tags/Community" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Community</a>

Dan VespaAlways better to user Powershell...Managing Calendar Permissions with PowerShell <a href="https://www.cayville.ca/managing-calendar-permissions-with-powershell/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.cayville.ca/managing-calendar-permissions-with-powershell/</a><a href="https://mastodon.social/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://mastodon.social/tags/Exchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exchange</a> <a href="https://mastodon.social/tags/ExchangeOnline" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ExchangeOnline</a>

BCWHSPowerShell wbMSPmodule1.7 update brings a simple yet effective PowerShell diagnostic tool for your Windows workstation. <a href="https://wadebach.blackcatwhitehatsecurity.com/powershell.cfm" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wadebach.blackcatwhitehatsecurity.com/powershell.cfm</a> <a href="https://mastodon.social/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://mastodon.social/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://mastodon.social/tags/Diagnostics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Diagnostics</a>

Sanjaymenon15 Ways to Bypass the PowerShell Execution Policy<a href="https://www.netspi.com/blog/technical-blog/network-pentesting/15-ways-to-bypass-the-powershell-execution-policy" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.netspi.com/blog/technical-blog/network-pentesting/15-ways-to-bypass-the-powershell-execution-policy</a><a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#powershell</a> <a href="https://mastodon.social/tags/windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#windows</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

OTX BotMining in Plain Sight: The VS Code Extension Cryptojacking CampaignA sophisticated cryptomining campaign has been discovered targeting developers through seemingly legitimate VS Code extensions. The campaign, potentially reaching over one million installations, involves fake extensions published by three different authors. These extensions secretly download a PowerShell script that disables Windows security, establishes persistence, and installs an XMRig cryptominer. The most successful fake extension gained 189K installs. The attackers created a multi-stage attack, even installing legitimate extensions they impersonated to avoid suspicion. The campaign published ten different malicious extensions, with the top three showing unusually high install counts, suggesting artificial inflation. The extensions share identical code and communicate with the same C2 server. The PowerShell script sets up persistence mechanisms, disables Windows security services, and attempts privilege escalation.Pulse ID: 67f4ffb4bf1e842db102d8bd Pulse Link: <a href="https://otx.alienvault.com/pulse/67f4ffb4bf1e842db102d8bd" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://otx.alienvault.com/pulse/67f4ffb4bf1e842db102d8bd</a> Pulse Author: AlienVault Created: 2025-04-08 10:51:32Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/CryptoJacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CryptoJacking</a> <a href="https://social.raytec.co/tags/CryptoMiner" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CryptoMiner</a> <a href="https://social.raytec.co/tags/CryptoMining" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CryptoMining</a> <a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://social.raytec.co/tags/SMS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMS</a> <a href="https://social.raytec.co/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/developers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#developers</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AlienVault</a>

Dr. Friedrich von NeverToday, thanks to help from a contributor, I've published my project VerifyEncoding to <a href="https://dotnet.social/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> Gallery. The project's been evolved from a script I used to copy-paste into all my OSS repositories, to make sure nobody commits \r\n or UTF-8 BOM to text files.Go check it out!<a href="https://www.powershellgallery.com/packages/VerifyEncoding/2.1.0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.powershellgallery.com/packages/VerifyEncoding/2.1.0</a>

AndrewPlaTechToday, I was the recipient of the Sean Kearney <a href="https://techhub.social/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> spirit award and wanted to share some perspective on what this means to me. PowerShell Summit has always been a time for reflection on my own growth and journey, but this year is different. <a href="https://techhub.social/tags/PSHSummit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PSHSummit</a>

Taylor ParizoI just learned Powershell has a ‘WhatIf’ parameter to show what a command will do before actually executing it. <a href="https://infosec.exchange/tags/powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#powershell</a>

LeanpubBehind the PowerShell Pipeline: Discovering What You Didn't Know You Needed to Know <a href="https://leanpub.com/behind-the-pspipeline" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://leanpub.com/behind-the-pspipeline</a> by Jeff Hicks is the featured book on the Leanpub homepage! <a href="https://leanpub.com" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://leanpub.com</a> <a href="https://mastodon.social/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://mastodon.social/tags/books" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#books</a> <a href="https://mastodon.social/tags/ebooks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ebooks</a> JeffHicks@techhub.social

AndrewPlaTechI’m honored to be the recipient of the Sean Kearney <a href="https://techhub.social/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> Spirit award at <a href="https://techhub.social/tags/pshsummit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pshsummit</a>Sean was a huge influence on the PowerShell community, and I’m truly humbled. His positivity, passion, and impact continue to live on through the people he inspired.

FurbyOnSteroidsI like to bitch about the <a href="https://ohai.social/tags/powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#powershell</a> / command line in <a href="https://ohai.social/tags/windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#windows</a> but what the heck is even the <a href="https://ohai.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> shell array syntax.

OTX BotUnveiling EncryptHub: Analysis of a multi-stage malware campaignEncryptHub, an emerging cybercriminal entity, has been conducting multi-stage malware campaigns using trojanized applications and third-party distribution services. Their tactics include using PowerShell scripts for system data gathering, information exfiltration, and payload deployment. The threat actor prioritizes stolen credentials based on cryptocurrency ownership and corporate network affiliation. EncryptHub is developing a remote access tool called 'EncryptRAT' with plans for future distribution. Their evolving killchain involves multiple stages, including initial execution, data exfiltration, system information collection, and eventual deployment of the Rhadamanthys malware. Despite operational security mistakes, EncryptHub continues to refine their tactics, emphasizing the need for vigilant cybersecurity measures.Pulse ID: 67f3aae3b4d4fbbfe08e7839 Pulse Link: <a href="https://otx.alienvault.com/pulse/67f3aae3b4d4fbbfe08e7839" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://otx.alienvault.com/pulse/67f3aae3b4d4fbbfe08e7839</a> Pulse Author: AlienVault Created: 2025-04-07 10:37:23Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/ICS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ICS</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://social.raytec.co/tags/RAT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RAT</a> <a href="https://social.raytec.co/tags/Rhadamanthys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rhadamanthys</a> <a href="https://social.raytec.co/tags/Trojan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Trojan</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/cryptocurrency" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptocurrency</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AlienVault</a>

Sass, David<a href="https://infosec.exchange/@Peacefulz" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Peacefulz</a> <a href="https://hachyderm.io/@apicultor" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@apicultor</a> Does PS stands for <a href="https://infosec.exchange/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a>? If so, you can run that on everything these days!

A.J. ArmstrongRemove Windows Server Disabled Roles and Features Payload Files | <a href="https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17103 | #Guide" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17103 | #Guide</a> <a href="https://techhub.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://techhub.social/tags/Powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Powershell</a> <a href="https://techhub.social/tags/Servers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Servers</a> <a href="https://techhub.social/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a>  <a href="https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17103" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17103</a>

Anthony PowellRemove Windows Server Disabled Roles and Features Payload Files | <a href="https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17102 | #Guide" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17102 | #Guide</a> <a href="https://mastodon.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://mastodon.social/tags/Powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Powershell</a> <a href="https://mastodon.social/tags/Servers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Servers</a> <a href="https://mastodon.social/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a>  <a href="https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17102" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/remove-windows-server-disabled-roles-and-features-payload-files/?fsp_sid=17102</a>

iX MagaziniX-Workshop: Windows Server absichern und härtenLernen Sie, wie Sie Ihren Windows Server effektiv absichern und härten, Schutzmaßnahmen integrieren, Konfigurationen optimieren und Angriffsszenarien bewerten.<a href="https://www.heise.de/news/iX-Workshop-Windows-Server-absichern-und-haerten-10335055.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.heise.de/news/iX-Workshop-Windows-Server-absichern-und-haerten-10335055.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon</a><a href="https://social.heise.de/tags/Automatisierung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Automatisierung</a> <a href="https://social.heise.de/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a> <a href="https://social.heise.de/tags/iXWorkshops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iXWorkshops</a> <a href="https://social.heise.de/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://social.heise.de/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

Joe Loveless2 posts in 2 weeks, some sort of record for me.joeloveless.com/2025/04/entr...<a href="https://infosec.exchange/tags/intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#intune</a> <a href="https://infosec.exchange/tags/azure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#azure</a> <a href="https://infosec.exchange/tags/powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#powershell</a> <a href="https://infosec.exchange/tags/extensionattributes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#extensionattributes</a>

A.J. ArmstrongIdentifying Users Not in a Specific Active Directory Group with PowerShell | <a href="https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16970 | #ActiveDirectory" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16970 | #ActiveDirectory</a> <a href="https://techhub.social/tags/Guide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Guide</a> <a href="https://techhub.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://techhub.social/tags/Powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Powershell</a> <a href="https://techhub.social/tags/refresh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#refresh</a>  <a href="https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16970" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16970</a>

Anthony PowellIdentifying Users Not in a Specific Active Directory Group with PowerShell | <a href="https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16969 | #ActiveDirectory" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16969 | #ActiveDirectory</a> <a href="https://mastodon.social/tags/Guide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Guide</a> <a href="https://mastodon.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://mastodon.social/tags/Powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Powershell</a> <a href="https://mastodon.social/tags/refresh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#refresh</a>  <a href="https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16969" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techygeekshome.info/users-not-in-specific-ad-group-powershell/?fsp_sid=16969</a>

Pyrzout :vm:Beware of Clickfix: ‘Fix Now’ and ‘Bot Verification’ Lures Deliver and Execute Malware <a href="https://gbhackers.com/beware-of-clickfix-fix-now-and-bot-verification/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://gbhackers.com/beware-of-clickfix-fix-now-and-bot-verification/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/PowerShell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PowerShell</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a>

Recent searches

Search options

Administered by:

Server stats:

#powershell