Despite attempts to get everyone to patch holes in its IIS software, Microsoft has failed to innoculate its own Hotmail servers against the Code Red worm. Microsoft acknowledges on MSNBC that its servers have been hit by the worm, but doesn't give specific details on how many. Though Microsoft is insisting over at CNet that no personal information has been compromised, I can't help but wonder why Microsoft seems to have such problems patching its own servers.
TR reader Stephen Barash points out that his IIS logs show multiple Hotmail servers hammering away with Code Red, so the problem is likely much larger than Microsoft is willing to admit. Maybe Microsoft figures they'll become the underdog if they keep embarassing themselves like this. Then again, maybe they need to clean house and get some new admins.
