Windows PowerShell now warns when running Invoke-WebRequest scripts

Microsoft updated Windows PowerShell 5.1 to display a security confirmation when Invoke-WebRequest (including the curl alias) fetches web pages, to mitigate a high-severity remote code execution vulnerability (CVE-2025-54100). The advisory lists KB updates for Windows 10/11 and Windows Server, recommends using the -UseBasicParsing switch or updating scripts to avoid manual prompts, and notes that most scripts that only retrieve content remain unaffected.