Since July 2016, attackers have been using a zero-day in IIS 6.0 to compromise and take over Windows servers. The zero-day was discovered by two Chinese researchers from the Information Security Lab & ...