Remote Powershell News Today

The operators of the Rhysida ransomware-as-a-service have claimed credit for a crippling attack on Mississippi's Singing River health system.

Microsoft's legacy Remote PowerShell protocol in the Security and Compliance PowerShell module will begin to be deprecated soon, starting from July 15, 2023 as a part of modernisation efforts.

Microsoft has decided to effectively delay the deprecation of Remote PowerShell in Exchange Online in order to allow customers more time to migrate to the more secure REST-based v3 PowerShell module.

By starting with MFA and PAM solutions, security teams can start to mitigate lateral movement in their networks.

The Play ransomware group was spotted exploiting another little-known SSRF bug to trigger RCE on affected Exchange servers.

Play ransomware threat actors are using a new exploit chain that bypasses ProxyNotShell URL rewrite mitigations to gain remote code execution (RCE) on vulnerable servers through Outlook Web Access (OWA).

The attackers are delivering remote access software and remote administration tools to target endpoints.

Exploited by the Play ransomware gang.

Yiftach Keshet, director of product marketing at Silverfort, shares how effective risk analysis and MFA help tackle lateral movement attacks better.

Researchers believe Chinese hackers are using them, but mitigations are available.