Flaw in Microsoft IIS 6.0 web server, which is no longer supported but reportedly still powers millions of websites, has been actively exploited since Aug. 2016
An exploit for a zero-day vulnerability in Microsoft IIS 6.0 was published online, increasing the risk of attacks