Topic · 1 article

Powershell: articles and guides

1 PlayCISO article on powershell, newest first. The most recent is “@apexacc/cli: Malicious npm Package Drops Windows Infostealer”.

@apexacc/cli: Malicious npm Package Drops Windows Infostealer

Elastic Security Labs is investigating @apexacc/cli, an npm package still live on the registry that disables Windows Smart App Control and AV exclusions, then chains Base64 PowerShell through Python/PyInstaller, PyArmor and a Go shellcode loader to an infostealer. What we know so far, credited to the source.

September 18, 2026

🖤 Black Friday: new customers get 3 months of Pro for $5, then $5/month. Ends 30 Nov. Claim 3 months for $5 →

LABNew: 9 hands-on security labs — firewall, DMARC, cloud, detection, forensics NEWSChina-linked hackers exploited VMware ESX zero-day to hide their tracks LABTune SPF/DKIM/DMARC and watch spoofs bounce — Email Auth Lab BLOGAI Biosecurity: The Misuse Risks and the Safeguards LABCatch the attack with zero false positives — free Detection Lab NEWSVolt Typhoon ran four zero-day campaigns through a covert "Silent Train" network PLAYRun a live Cyber War Room incident simulation PLAYPractice a board report and get it AI-graded BLOGAI-Enabled Cyberattacks: How LLMs Are Misused, and How to Defend PLAYLive AI mock interview for security leaders NEWSAI-assisted PHP2Shell attack breached 25 servers and a U.S. government-affiliated network FREE2-minute CISO Readiness Scorecard — find your weakest area BLOGAI Influence Operations and Disinformation: A Defender's Guide TOOLS120+ interactive security architecture diagrams TOOLSGenerate and validate an AI Bill of Materials (AIBOM)NEWSee everything PlayCISO has shipped LABNew: 9 hands-on security labs — firewall, DMARC, cloud, detection, forensics NEWSChina-linked hackers exploited VMware ESX zero-day to hide their tracks LABTune SPF/DKIM/DMARC and watch spoofs bounce — Email Auth Lab BLOGAI Biosecurity: The Misuse Risks and the Safeguards LABCatch the attack with zero false positives — free Detection Lab NEWSVolt Typhoon ran four zero-day campaigns through a covert "Silent Train" network PLAYRun a live Cyber War Room incident simulation PLAYPractice a board report and get it AI-graded BLOGAI-Enabled Cyberattacks: How LLMs Are Misused, and How to Defend PLAYLive AI mock interview for security leaders NEWSAI-assisted PHP2Shell attack breached 25 servers and a U.S. government-affiliated network FREE2-minute CISO Readiness Scorecard — find your weakest area BLOGAI Influence Operations and Disinformation: A Defender's Guide TOOLS120+ interactive security architecture diagrams TOOLSGenerate and validate an AI Bill of Materials (AIBOM)NEWSee everything PlayCISO has shipped