> TritonInfoSec News
Home / Aug 20, 2026 / Story
0
#10 BleepingComputer general August 18, 2026 at 08:12 UTC

Microsoft starts removing WMIC tool used by cybercriminals

By Sergiu Gatlan

AI Summary

Microsoft has begun removing the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2, 25H2, and current beta builds, eliminating a utility that threat actors have routinely abused for living-off-the-land attacks. Security teams managing Windows 11 endpoints should audit scripts and tooling that depend on WMIC before broader rollout of affected builds.

Read full article → https://www.bleepingcomputer.com/news/microsoft/mi…

Relevance score: 74.0/100

# More from August 20

  1. 1
    Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation The Hacker News
  2. 2
    Critical RCE flaw in Windows IKE Extension now actively exploited BleepingComputer
  3. 3
    US warns of AI-powered attacks on Siemens PLCs in critical infrastructure BleepingComputer
  4. 4
    Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign SecurityWeek
  5. 5
    Password spraying attacks surge 155x as hackers exploit MFA gaps BleepingComputer
  6. 6
    CISA: Medusa ransomware hit over 500 critical infrastructure orgs BleepingComputer
  7. 7
    Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second The Hacker News
  8. 8
    US charges Iranian hackers over $3.4 billion intellectual property theft BleepingComputer
  9. 9
    Healthtech firm CareCloud data breach impacts 3.7 million patients BleepingComputer