Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
KB5097149 patches three CVEs in .NET 8.0: serialization RCE, ASP.NET Core DoS, and cryptographic info disclosure. Updates to version 8.0.28 on Windows, Linux, and macOS. No known issues.
KB5091596 is a .NET 10.0.7 out-of-band security update patching CVE-2026-40372, a critical ASP.NET Core DataProtection HMAC bypass allowing authentication cookie forging and privilege escalation. Update immediately.
KB5086097 is the April 2026 security update for .NET 9.0, updating to version 9.0.15. Includes security fixes for runtime and ASP.NET Core on Windows, Linux, and macOS. Part of the April Patch Tuesday cycle.
KB5081277 patches CVE-2026-26130 (.NET Denial of Service) in .NET 8.0, updating to version 8.0.25. Available on Windows, Linux, and macOS. Superseded by .NET 8.0.28 (July 2026).
