Are you still using IIS 6.0? Stop right now – a zero-day exists that won’t be patched

Are you still using IIS 6.0? Stop right now – a zero-day exists that won’t be patched

What’s worse than an actively exploited zero-day vulnerability for which there is no patch? Not much – but we have that situation now, where IIS6 from Microsoft is actively being exploited, and because it is ‘end-of-life’ – there will never be a patch for this expoit!

Worse still – this is an exploit that seems to have been exploited since July or August 2016.