Blogged: Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315

andrewlock.net/understandin...

In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it

#dotnet #aspnetcore

itnext.io/how-i-almost...

One of the biggest threats to many companies today is supply chain attacks with software. We all depend on so many open source third-party tools as foundations to our products. Bad actors have figured out this is a soft target. An interesting read on this below. (1️⃣/3️⃣)

🧵

I have been playing around with the new C# MCP SDK allowing you to easily create servers and clients in minutes.

It is fantastic!

github.com/modelcontext...

#mcp #mcpserver #csharp #dotnet

NSwag v14.3.0, an OpenAPI toolchain for .NET, and NJsonSchema v11.2.0 have been released. The updates contain many improvements and fixes. Please update and report any problems.

- github.com/RicoSuter/NS...
- github.com/RicoSuter/NJ...

Well I think I've fully come around to the idea that LLMs are computers. So I wrote about that. I guess this is my most bombastic blog post www.phillipcarter.dev/posts/llms-c...

This is still one of my go-to ways to describe what programmers do. And yes, it is accurate.

Blogged: Understanding cross-origin security headers - Part 1 - Cross-Origin-Opener-Policy: preventing attacks from popups

andrewlock.net/understandin...

In this post I describe how to protect yourself from vulnerabilities in JS APIs with the Cross-Origin-Opener-Policy header

#aspnetcore #appsec

NSwag v14.2.0 with .NET 9 support has been released!
#dotnet #nswag #dotnet9

github.com/RicoSuter/NS...