Security News

Actively exploited zero-day in IIS 6.0 affects 60,000+ servers (Help Net Security)
2017-03-30 14:15

Microsoft Internet Information Services (IIS) 6.0 sports a zero-day vulnerability (CVE-2017-7269) that was exploited in the wild last summer and is likely also being exploited by threat actors at...

Publicly Attacked Microsoft IIS Zero Day Unlikely to be Patched (Threatpost)
2017-03-29 19:15

Researchers have disclosed a zero-day vulnerability and proof-of-concept exploit for a flaw in Microsoft IIS 6.0. The zero-day has been under attack since last July, the researchers said.

Microsoft Offers Analysis of Zero-Day Being Exploited By Zirconium Group (Threatpost)
2017-03-28 21:12

Microsoft patched a zero-day vulnerability actively used in a campaign by a hacking group known as Zirconium.

Mozilla Patches Pwn2Own Zero Day in Firefox (Threatpost)
2017-03-20 17:50

Mozilla patched a zero day uncovered at Pwn2Own in Firefox in 22 hours on Friday.