NSA warns against silly mistake in the fight against Windows malware

Task automation platform PowerShell, which is often abused by threat actors distributing malware (avaneb uuel vahelehel), can also be used for attack detection and prevention. This is the advice the US National Security Agency (NSA) recently gave to system administrators everywhere. 

Alongside cybersecurity centers in the UK and New Zealand, the NSA published a security advisory in which it argues that blocking PowerShell, a common security practice, actually lowers organizations’ defensive capabilities against ransomware (avaneb uuel vahelehel) and other forms of cyberattacks.