Microsoft

Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know

On October 14, 2025, Microsoft released a security update addressing CVE-2025-55315, a vulnerability in ASP.NET Core that allows HTTP request smuggling. While request smuggling is a known technique, ...
Bleeping Computer

Microsoft fixes highest-severity ASP.NET Core flaw ever

Earlier this week, Microsoft patched a vulnerability that was flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. This HTTP request smuggling bug (CVE-2025-55315 ...
Bleeping Computer

Microsoft says attackers use exposed ASP.NET keys to deploy malware

Microsoft warns that attackers are deploying malware in ViewState code injection attacks using static ASP. NET machine keys found online. As Microsoft Threat Intelligence experts recently discovered, ...
InfoWorld

How to use resource-based authorization in ASP.NET Corefine-grained access

Take advantage of resource-based authorization in ASP.NET Core to provide fine-grained access to resources in scenarios not supported by attribute-based authorization. When implementing authorization ...
Visual Studio Magazine

Versioning and Documenting ASP.NET Core Services

Building an API with ASP.NET Core is only half the job. If your API is going to live more than one release cycle, you're going to need to version it. If you have other people building clients for it, ...
InfoQ

ASP.NET Core 9: Enhancements in Static Asset Handling, Blazor, SignalR, and OpenAPI Support

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Cory Benfield discusses the evolution of ...
IEEE

5G-WAVE: A Core Network Framework with Decentralized Authorization for Network Slices

Abstract: 5G mobile networks leverage Network Function Virtualization (NFV) to offer services in the form of network slices. Each network slice is a logically isolated fragment constructed by service ...
InfoWorld

Build an authentication handler for a minimal API in ASP.NET Core

ASP.NET Core offers a simplified hosting model, called minimal APIs, that allows us to build lightweight APIs with minimal dependencies. However, “minimal” doesn’t mean minimal security. Minimal APIs ...
GitHub

[WebToolsE2E][Aspire] For an ASP.NET Core Web App Ind Auth project with Aspire, package restore fails when adding Aspire component Aspire.Microsoft.EntityFrameworkCore.SqlServer

Includes SDK 8.0.300-preview.24101.10 Includes Aspire version 8.0.0-preview.3.24105.21 Includes ASP.NET Core templates version 8.0.1 Install Aspire 8.0 P4 Version 8.0.0-preview.4.24118.7 New Project > ...
GitHub

ASP.NET Core Blazor Authorization Roles do not allow non-word characters

I am using blazor server for a basic test website, using the following documentation: https://learn.microsoft.com/en-us/aspnet/core/blazor/security/?view=aspnetcore-8 ...