In a recent blog post from a company called Recorded Future, which specializes in data protection, details were provided on commonly exploited vulnerabilities on the Windows platform.
Recorded Future Blog: https://www.recordedfuture.com/blog/
Specific Post: Microsoft Targeted by 8 of 10 Top Vulnerabilities in 2018
Within that post, Recorded Future states the following:
Additionally, there are no mitigating factors available to prevent CVE-2016-0189 — the only workarounds are restricting access to two common dynamic-linked library files: VBScript.dll and JScript.dll.
Question 1: What exactly does it mean to restrict access to VBScript.dll and JScript.dll?
Question 2: How best to do this with PowerShell or Group Policy at scale?