Article 6DXB6 PowerShell? More like PowerHell: Microsoft won't fix flaws in package gallery ripe for supply chain attacks

PowerShell? More like PowerHell: Microsoft won't fix flaws in package gallery ripe for supply chain attacks

by
from The Register on (#6DXB6)
Story ImageBillions of downloads and no defense against typosquatting feels like a bad combination in this day and age

A trio of PowerShell Gallery design flaws reported to Microsoft almost a year ago remain unfixed, leaving registry users vulnerable to typosquatting and supply chain attacks, according to Aqua Nautilus....

External Content
Source RSS or Atom Feed
Feed Location http://www.theregister.co.uk/headlines.atom
Feed Title The Register
Feed Link https://www.theregister.com/
Feed Copyright Copyright © 2024, Situation Publishing
Reply 0 comments