In April, the number of web attacks rose sharply, and Microsoft was quickly blamed for the problems. The software giant investigated and concluded that security groups had jumped to conclusions and that the attacks were not related to security vulnerabilities in IIS 6.0, ASP, ASP.Net, or Microsoft SQL technologies. Instead, it was found that the attacks were due to automatic exploits of SQL injection vulnerabilities, and the company pointed to its own guides on following good practices to avoid such attacks.
|