Publicly Attacked Microsoft IIS Zero Day Unlikely to be Patched

Researchers have disclosed a zero-day vulnerability and proof-of-concept exploit for a flaw in Microsoft IIS 6.0. The zero-day has been under attack since last July, the researchers said. Continue reading Publicly Attacked Microsoft IIS Zero Day Unlikely to be Patched

The Changing Face of Pseudo-Darkleech

The chameleon-like pseudo-Darkleech campaign, responsible for prolific exploit kit attacks and ransomware infections, has again made a change to its code that will frustrate researchers. Continue reading The Changing Face of Pseudo-Darkleech

DROWN vulnerability could sink secure internet connections

New SSL/TLS vulnerability (CVE-2016-0800) could allow attackers to obtain encryption keys.Read More Continue reading DROWN vulnerability could sink secure internet connections