Web Shells
The latest Web Shells coverage — news, analysis, and updates from the WindowsNews.AI desk.
ReliaQuest Exposes OP-512: Chinese Hackers Use Modular IIS Web Shells to Steal Credentials
A sophisticated three-part web shell framework, linked to Chinese threat actors and tracked as OP-512, is actively compromising Internet Information Services (IIS) servers, according to research...
SharePoint RCE Vulnerability: Complete Guide to Patching and Mitigation
Microsoft's on-premises SharePoint Server is facing a critical security crisis with the discovery of an unauthenticated remote code execution (RCE) vulnerability chain that allows attackers to gain...
CISA Exposes Key-Stealing Malware in Ivanti EPMM: What Windows IT Teams Must Do Now
CISA dropped a stark warning on September 18, 2025: attackers are actively exploiting a pair of vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) to deploy a stealthy, purpose-built malware...
GhostRedirector Sneaks Native Backdoors Into IIS to Hijack SEO Rankings
A stealthy campaign that has compromised at least 65 Internet-facing Windows IIS servers worldwide is using a pair of previously unseen native implants to convert legitimate websites into invisible...