Attacks that have compromised half a million Web sites are not due to any new or unknown flaws in Microsoft IIS or SQL Server, according to the company's security response team.

Microsoft denies fault in hacks