Microsoft fixes Windows bug breaking localhost HTTP connections

Microsoft has fixed a known issue breaking HTTP/2 localhost (127.0.0.1) connections and IIS websites after installing recent Windows security updates.

• Sergiu Gatlan
• October 17, 2025
• 09:58 AM
• 0

Windows 11 April update unexpectedly creates new 'inetpub' folder

Microsoft's April 2025 Patch Tuesday updates are strangely creating an empty "inetpub" folder in the root of the C:\ drive, even on systems that do not have Internet Information Services (IIS) installed.

• Lawrence Abrams
• April 09, 2025
• 03:04 PM
• 5

New Webinar: Choose Your Own Investigation — Browser Attack Edition

Modern attacks have shifted focus to the browser, yet detection tools remain largely blind to the crucial activity happening there.

Join Push Security on February 11th for an interactive "choose-your-own-adventure" webinar on ClickFix, credential phishing, and other in-browser attacks we've observed in the wild.

• Push Security Sponsorship

Lazarus hackers target Windows IIS web servers for initial access

The notorious North Korean state-backed hackers, known as the Lazarus Group, are now targeting vulnerable Windows Internet Information Services (IIS) web servers to gain initial access to corporate networks.

• Bill Toulas
• May 29, 2023
• 09:00 AM
• 1

US federal agency hacked using old Telerik bug to steal data

Last year, a U.S. federal agency's Microsoft Internet Information Services (IIS) web server was hacked by exploiting a critical .NET deserialization vulnerability in the Progress Telerik UI for ASP.NET AJAX component.

• Sergiu Gatlan
• March 15, 2023
• 12:39 PM
• 0

Hackers backdoor Microsoft IIS servers with new Frebniis malware

Hackers are deploying a new malware named 'Frebniss' on Microsoft's Internet Information Services (IIS) that stealthily executes commands sent via web requests.

• Bill Toulas
• February 16, 2023
• 11:38 AM
• 0

Hackers use Microsoft IIS web server logs to control malware

The Cranefly hacking group, aka UNC3524, uses a previously unseen technique of controlling malware on infected devices via Microsoft Internet Information Services (IIS) web server logs.

• Bill Toulas
• October 28, 2022
• 06:00 AM
• 0