iis security

ReliaQuest disclosed on June 5, 2026, that a newly tracked China-linked threat cluster called OP-512 is targeting Microsoft Internet Information Services servers with a custom three-part web shell framework built for stealth, authenticated command execution, and automated compromise reporting...

ReliaQuest disclosed on June 5, 2026, that a previously undocumented China-linked espionage cluster, tracked as OP-512, deployed a custom ASPX and ASHX web shell framework against Microsoft IIS servers, including a Windows Server 2016 host running long-unsupported .NET Framework 4.0 in a...

ReliaQuest researchers disclosed on June 5, 2026, that a newly tracked threat cluster called OP-512 is targeting Microsoft Internet Information Services servers with a custom three-part web shell framework, and they assess with moderate to high confidence that the espionage activity is linked to...

HTTP/2 Bomb is a newly disclosed remote denial-of-service attack, published in early June 2026 by Calif researchers, that can exhaust memory on default HTTP/2 deployments of nginx, Apache HTTP Server, Microsoft IIS, Envoy, and Cloudflare’s Pingora. The uncomfortable part is not that HTTP/2 has...

Microsoft’s October security roll-up closed a critical local code-execution pathway in Internet Information Services (IIS) tied to legacy Inbox COM Objects after the vendor assigned CVE-2025-59282 to a race‑condition / use‑after‑free defect that can be abused to run arbitrary code when the...

On February 7, 2025, security officials sounded the alarm as Trimble issued important updates to counter a newly discovered vulnerability in its Cityworks Server AMS (Asset Management System). This vulnerability, identified as CVE-2025-0994, has raised concerns among administrators managing...

I've been using Windows server 2012R2 Standard for almost a decade now. I have apps running on the server which have created about 50,000 local users. These are local users created using WMIC scripts and eq. API's. The purpose is to allow for easy integration with IIS authentication. The app...