Rico Suter

Rico Suter

@ricosuter.com

Microsoft MVP, independent Software Engineer / Architect focusing on .NET and Microsoft technologies, creator of NSwag, NJsonSchema & other OSS, http://apimundo.com

565 followers217 following7 posts

Rico Suter reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315 andrewlock.net/understandin... In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it #dotnet #aspnetcore

andrewlock.netUnderstanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it

Rico Suter reposted

Darryl Ruggles
@darryl-ruggles.cloud

itnext.io/how-i-almost... One of the biggest threats to many companies today is supply chain attacks with software. We all depend on so many open source third-party tools as foundations to our products. Bad actors have figured out this is a soft target. An interesting read on this below. (1️⃣/3️⃣) 🧵

itnext.ioHow I Almost Got Pwned — A Tale of Supply Chain Attacks and GitHub Actions Gone WrongOr: “That time someone tried to turn my innocent Node.js repo into a credential-harvesting machine”

Rico Suter reposted

James Montemagno
@james.montemagno.com

I have been playing around with the new C# MCP SDK allowing you to easily create servers and clients in minutes. It is fantastic! github.com/modelcontext... #mcp #mcpserver #csharp #dotnet

github.comGitHub - modelcontextprotocol/csharp-sdk: The official C# SDK for Model Context Protocol servers and clients, maintained by MicrosoftThe official C# SDK for Model Context Protocol servers and clients, maintained by Microsoft - modelcontextprotocol/csharp-sdk

Rico Suter reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: Understanding cross-origin security headers - Part 1 - Cross-Origin-Opener-Policy: preventing attacks from popups andrewlock.net/understandin... In this post I describe how to protect yourself from vulnerabilities in JS APIs with the Cross-Origin-Opener-Policy header #aspnetcore #appsec

andrewlock.netCross-Origin-Opener-Policy: preventing attacks from popups: Understanding cross-origin security headers - Part 1In this post I describe the vulnerabilities in window.opener and window.open() and how to protect yourself with Cross-Origin-Opener-Policy

You are up to date.