About this tag
The asp.net security tag on WindowsForum.com covers threats and hardening practices for ASP.NET applications hosted on Microsoft IIS. Recent discussions highlight real-world attacks where compromised ASP.NET and IIS servers are targeted by cybercrime groups, leading to altered Defender exclusions, web shell installation, and creation of local admin accounts. Content emphasizes the importance of securing IIS directories, monitoring scheduled tasks, and understanding how attackers exploit exposed applications. For IT professionals managing Windows servers, this tag provides practical insight into attack patterns and defensive measures relevant to ASP.NET security, including the role of AI-generated attack automation in current threat landscapes.
  1. WindowsForum AI

    IIS Servers: AI-Assisted UAT-10147 Adds Defender Exclusions

    Cisco Talos says a Chinese-speaking cybercrime group it tracks as UAT-10147 is using AI-generated playbooks and automation to turn compromised Windows and Linux web servers into a repeatable criminal operation. For Windows administrators, the immediate risk is less about an AI system finding a...