Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Friday, 3 February, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

With days to go before Microsoft Windows Server 2003 support ends, IIS 6.0 users are heading towards new security dangers.

by The Gurus
July 9, 2015
in Editor's News
Share on FacebookShare on Twitter

Research from RiskIQ, the enterprise digital footprint security specialist, has discovered that 24 of the top 30 FTSE-listed companies in the UK are running web servers that will be out of support in less than a week, posing a potential security risk to both them and the public.
On July 14th, Microsoft ends support for its popular Windows Server 2003 product, which includes its Internet Information Services (IIS) 6.0 web server and Small Business Server 2003. This move means these software versions will no longer receive critical security updates or patches.
RiskIQ’s research discovered that amongst the top 30 FTSE companies, there were more than 73,000 instances of web servers in use. Microsoft’s IIS 6.0, used for web hosting and media streaming, was the 6th most popular server and used more than 2,675 times. Whilst some organisations run IIS 6.0 on forgotten networks or as test servers, the research worryingly found it was also used to host high profile websites of some of the largest FTSE companies in the UK.
In comparison, 22 of the top 30 DAX companies in Germany also face the same risks from using outdated technology but are much further ahead in replacing their ageing infrastructure; only 650 instances of IIS 6.0 were found in RiskIQ’s study of DAX organisations, a quarter of the total found in comparable FTSE companies.
Ben Harknett, RiskIQ Managing Director EMEA, says: “Hackers bypass traditional defence in-depth measures by finding and compromising web sites, based on exploits in unsupported software versions. Due to the lack of availability of critical security updates for IIS 6.0 beyond 14th July, hackers will be able to more easily exploit its security weaknesses, accessing systems and using company websites to serve malware to unsuspecting users. Companies are running the risk of operating a webserver as a ticking time bomb of vulnerabilities and reliability issues after that date.”
Users of IIS 6.0 have a handful of days before support fully ends. But RiskIQ’s research also found 417 instances of the top FTSE companies still using the outdated IIS 5.0, a product which hasn’t been supported by Microsoft for over a year.
“People expect that when they access a website of a reputable organisation it will be a safe, secure experience, no matter where they navigate to within the site. Organisations who continue to run IIS 6.0 beyond the 14th July support date run the risk that they will no longer be delivering the same secure experience.
 
“For any organisation it’s vital to understand how digital assets are hosted. At RiskIQ we work with organisations all over the globe to help them uncover what digital assets they have. Using this knowledge, organisations can better understand where the security weaknesses within those assets are, such as instances of IIS 6.0, and therefore take suitable action to replace obsolete web servers.” Harknett concluded.

FacebookTweetLinkedIn
Tags: Cyber Securityend of lifeinformation securityinfosecMicrosoftRiskIQWindowsWindows 2003
ShareTweetShare
Previous Post

Three Politicians Hacked over Public Wi-Fi

Next Post

ITSG News – Who are the Wild Neutron Hackers?

Recent News

london-skyline-canary-wharf

Ransomware attack halts London trading

February 3, 2023
Ransomware conversations: Why the CFO is pivotal to discussing and preparing for risk

Ransomware conversations: Why the CFO is pivotal to discussing and preparing for risk

February 2, 2023
JD Sports admits data breach

JD Sports admits data breach

January 31, 2023
Acronis seals cyber protection partnership with Fulham FC

Acronis seals cyber protection partnership with Fulham FC

January 30, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information