2026-03-23 11:40 UTC
Over 511 000 End-of-Life Microsoft IIS instances seen in our daily scans, out of those over 227 000 instances that are beyond the official Microsoft Extended Security Updates (ESU) period
Over 511 000 End-of-Life Microsoft IIS instances seen in our daily scans, out of those over 227 000 instances that are beyond the official Microsoft Extended Security Updates (ESU) period. We now tag those 'eol-iis' and 'eos-iis' respectively in our Vulnerable HTTP reports. Top countries running outdated IIS instances: China & USA
References
- https://x.com/Shadowserver/status/2036017138750861391
- https://infosec.exchange/@shadowserver/116277884431680440
- https://bsky.app/profile/shadowserver.bsky.social/post/3mhprwqd2xs26
- https://www.linkedin.com/feed/update/urn:li:activity:7441785045998174208
- https://cisa.gov/resources-tools/resources/reducing-attack-surface-end-support-edge-devices