Adversaries are using the SMB communications channel to launch template injection attacks against the energy sector, including nuclear facilities.

Researchers have disclosed a zero-day vulnerability and proof-of-concept exploit for a flaw in Microsoft IIS 6.0. The zero-day has been under attack since last July, the researchers said.