← Back to Feed
Microsoft starts removing WMIC tool used by cybercriminals
August 18, 2026 · BleepingComputer · Severity: MEDIUM
Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week.
Key Takeaways
- Microsoft removed the WMIC tool from Windows 11 24H2 and 25H2 builds released this week.
- WMIC has been commonly abused by cybercriminals for post-exploitation activities and lateral movement.
- The removal pushes users toward PowerShell as the replacement for WMI management tasks.