A wave of cyberattacks exploiting vulnerabilities in Microsoft Internet Information Services (IIS) servers, employing BadIIS malware, was recently identified with links to Chinese-speaking groups. The attackers have manipulated SEO rankings, distributed malicious content, and redirected users to illegal gambling websites or malicious servers. Victims are spread across Asia, with instances beyond this region. The attacks were executed for financial gain, highlighting inadequacies in IIS server security.

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software
Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most “systemically” important software


