Microsoft France defaced -- is an IIS 0day in the offing? The SANS Internet Storm Center is warning that a new, undiscovered (0day) exploit for Microsoft’s IIS Web server may be circulating online. Among the evidence they point to are a defacement of a Microsoft France Web page (documented via Flickr here.) and some “chatter” on defacement hub Zone-H that attributed it to a Web server intrusion which could mean an IIS hole, or merely a Web application hole. Given the widespread use of IIS as a Web server, any 0day, remotely exploitable hole is serious business. However, pictures of a small-scale defacement of microsoft.fr (the targeted page is offline) are hardly proof enough to warrant getting alarmed. Who knows, given the tendency of defacers to exaggerate, and France’s bum luck of late, there could be greater powers at work here than a mere Web server hole! Security