Friday, September 11, 2026

Microsoft to Remove PowerShell 2.0 from Windows 11 Due to Security Risks

Microsoft has announced a significant change for Windows 11 users: the removal of Windows PowerShell 2.0, a legacy scripting platform, from upcoming builds.

This move, first revealed in the Windows 11 Insider Preview Build 27891 released to the Canary Channel, is part of the company’s ongoing efforts to enhance system security and streamline the operating system.

Why PowerShell 2.0 Is Being Removed

PowerShell 2.0, first introduced in 2009, has long been considered outdated. Over the years, Microsoft has developed more secure and feature-rich versions of PowerShell.

However, the legacy 2.0 version remained present in Windows for compatibility reasons.

Security experts and Microsoft engineers have repeatedly highlighted that PowerShell 2.0 lacks modern security features, making it a potential vector for cyberattacks and malware exploitation.

Its continued presence posed unnecessary risks, especially as threat actors often target older, less secure components.

In the release notes for Windows 11 Insider Preview Build 27891, Microsoft confirmed that PowerShell 2.0 is now deprecated and has been removed from the most current Canary Channel builds.

The company stated, “More information will be shared in the coming months on the removal of Windows PowerShell 2.0 in an upcoming update for Windows 11.”

This signals that the deprecation will soon extend to all supported versions of Windows 11, not just Insider builds.

Implications for Users and IT Administrators

  • Enhanced Security: Removing PowerShell 2.0 closes off an avenue for attackers who exploit legacy scripting environments.
  • Modernization: Users and organizations are encouraged to migrate scripts and automation tasks to newer versions of PowerShell, which include improved security, compatibility, and performance.
  • Compatibility: Some legacy scripts or applications may require updates to function with newer PowerShell versions. Microsoft advises IT administrators to audit their environments and update any dependencies accordingly.

Microsoft has promised to provide additional guidance and timelines for the full removal of PowerShell 2.0 in the coming months.

Users on the Insider Canary Channel will be the first to experience this change, serving as a testing ground before broader deployment.

The company’s phased approach aims to minimize disruption while ensuring that Windows 11 remains secure and up to date.

Additional Updates in Build 27891

Alongside the PowerShell 2.0 removal, Build 27891 introduces a series of fixes and improvements across the operating system, including:

  • Resolved issues with system recovery, taskbar visuals, and language rendering.
  • Fixes for File Explorer dropdowns, Settings crashes, and Bluetooth-related problems.
  • Updates to Task Manager CPU metrics and system sound reliability.

Microsoft continues to encourage feedback from Windows Insiders as it refines these updates ahead of general release.

Exclusive Webinar Alert: Harnessing Intel® Processor Innovations for Advanced API Security – Register for Free

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign

A long-running pay-per-install (PPI) operation that used YouTube gaming...

VLC Media Player Flaws Let Attackers Corrupt Memory and Leak Sensitive Data

Two security vulnerabilities in VLC media player versions 3.0.0...

CISA Adds Exploited MikroTik RouterOS Flaws to Security Alert

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has...

cPanel Urges Users to Patch ConfigServer Firewall Remote Code Execution Flaw

A recently disclosed vulnerability in ConfigServer Security & Firewall...

Hackers Weaponize AI Safety Guardrails to Hide Malware From LLM-Powered Security Scanners

Threat actors are adapting malware not only for conventional...

Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access

Threat actors are actively exploiting three vulnerabilities in JFrog...

Related Articles

Recent News