Since its inception as an intriguing experiment in leveraging WebAssembly to enable dynamic web development with C#, Blazor has evolved into a mature, fully featured framework. Integral to the ASP.NET ...

Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate privileges. The vulnerability, tracked as CVE-2026-40372, ...

Microsoft is making it easier for IT admins to monitor the status of Secure Boot on Windows devices across their organization. Secure Boot has been a pretty hot topic for Microsoft lately, especially ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Dany Lepage discusses the architectural ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Earlier this week, Microsoft patched a vulnerability that was flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. This HTTP request smuggling bug (CVE-2025-55315 ...

CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes. Microsoft’s October Patch Tuesday updates addressed a critical-severity ...

How to configure the CORS middleware for minimal APIs and enable secure cross-origin resource sharing in your ASP.NET Core applications. ASP.NET Core offers a simplified hosting model, called minimal ...

This article describes how to call a web API from a Blazor app. In-memory distributed token caches are created when calling xref:Microsoft.Identity.Web ...

Website developers are unwittingly putting their companies at risk by incorporating publicly disclosed ASP.NET machine keys from code documentation and repositories into their applications, Microsoft ...

Microsoft warns that attackers are deploying malware in ViewState code injection attacks using static ASP. NET machine keys found online. As Microsoft Threat Intelligence experts recently discovered, ...

If you've been following the .NET coverage on this site from just the past month -- for instance, ".NET 10 Preview 3 Adds Native Container Publishing, ".NET 10 Preview 4 Focuses on ASP.NET Core, ...