Half a million Microsoft-powered sites hit with SQL injection
 

A new SQL injection attack aimed at Microsoft IIS web servers has hit some 500,000 websites, including the United Nations, UK Government sites and the U.S. Department of Homeland Security. While the attack is not necessarily Microsoft's fault, it is unique to the company's IIS server.

http://blog.wired.com/monkeybites/20...oft-datab.html