A wave of cyberattacks exploiting vulnerabilities in Microsoft Internet Information Services (IIS) servers, employing BadIIS malware, was recently identified with links to Chinese-speaking groups. The attackers have manipulated SEO rankings, distributed malicious content, and redirected users to illegal gambling websites or malicious servers. Victims are spread across Asia, with instances beyond this region. The attacks were executed for financial gain, highlighting inadequacies in IIS server security.

Hackers Exploit F5 BIG-IP to Gain SSH Access and Pivot Into Linux Networks
Threat actors are actively exploiting end-of-life F5 BIG-IP appliances to gain unauthorized SSH access into enterprise networks, using the compromised devices as launchpads for sophisticated


