Master WS-Federation for hybrid identity. Learn how to bridge legacy ASP.NET apps with modern Entra ID and OIDC using the .NET 10 Passive Requestor Profile.

Microsoft MVP Philip Japikse discusses how ASP.NET Core Razor Pages in .NET 10 provides a streamlined, page-centric ...

ASP.NET Core planning for .NET 11 is now in progress! This roadmap is currently just a placeholder. We'll update the roadmap with specific planned features as planning progresses. This issue ...

Earlier this week, Microsoft patched a vulnerability that was flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. This HTTP request smuggling bug (CVE-2025-55315 ...

The Kestrel web server flaw allows request smuggling attacks, but the actual risk depends on the application code and deployment. Microsoft has patched a critical vulnerability in ASP.NET Core that ...

CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes. Microsoft’s October Patch Tuesday updates addressed a critical-severity ...

Microsoft has expanded its .NET bug bounty program and increased rewards to $40,000 for some .NET and ASP.NET Core vulnerabilities. Madeline Eckert, a senior program manager for Researcher Incentives ...

The web-dev ASP.NET Core framework and Xamarin.Forms' successor .NET MAUI received the lion's share of dev attention in the seventh preview of .NET 9 as Microsoft preps for a November launch at .NET ...

HybridCache is a new API in .NET 9 that brings additional features, benefits, and ease to caching in ASP.NET Core. Here’s how to take advantage of it. Caching is a proven strategy for improving ...

The .NET framework allows cross-platform development on Windows and Mac, and Microsoft released version 8 for both in November. Here's what that means to developers. In the late 1990s, Microsoft began ...