.NET is Microsoft's software development platform, and flaws in its runtimes or libraries can expose applications and services to attack.
Search across headline titles and summaries.
Background for this topic.
.NET is Microsoft’s software-development platform: a runtime, standard libraries, language support, and application frameworks used to build web services, APIs, desktop software, and other applications. The name covers modern, cross-platform .NET as well as the older Windows-focused .NET Framework, which have different release and support paths and should be distinguished during vulnerability management.
Security exposure can arise in the runtime, ASP.NET request-handling components, application configuration, and third-party NuGet packages. Vulnerabilities may enable code execution, denial of service, or unauthorized access when affected components are reachable or incorrectly used; insecure deserialization and weak authentication or authorization are recurring application-level concerns. Operators should inventory the exact runtime and framework versions, apply supported security updates, monitor transitive dependencies, and remove obsolete components. Developers should use platform-provided cryptography and TLS appropriately, validate untrusted input, protect secrets outside source code, and configure authentication and authorization explicitly.
Weekly headline count for the current query.
Phantom Stealer .NET harvests browser credentials, cookies, cards, sessions, as stealer-as-a-service
The campaign shows APT29’s intentions to “cast a wider net in their intelligence collection efforts,” said Amazon
A widespread RFQ scam exploited net payment terms to fraudulently obtain high-value devices
Health Net Federal Services has agreed to pay over $11m over alleged false cybersecurity reporting
Ivanti research found that security professionals are eight-times more likely to say GenAI is a net positive versus a net negative for cybersecurity
FTC figures reveal a three-fold increase in losses from impersonation scams over the past three years
Trend Micro reported recent attacks focused on government sectors, including foreign affairs, energy, defense and transportation
FBI warns of scammers using Net-30 and Net-60 terms