Have you ever considered running a Windows-based web server (IIS) that’s exposed to the evil dark internet?

Have you ever figured that all the hype about compromising IIS installations is just that - hype?

Have you ever wondered if you really needed to run Windows Update every time Microsoft releases the smallest most insignificant patch?

Thanks to Security Monkey, there should be no doubt to any of these questions. (The answers are: no, no, and YES, respectively…)

I highly recommend that you check out the video he references in that post. Direct link: here.

UPDATE: I just read the comments on the SecurityMonkey blog entry, and they reference a source for more videos like this, should you be interested. Check them out at iwhax.net!