# .NET 11 Published articles for .NET 11. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## November 2026 Patch Tuesday forecast: Old software continues to bite DevFeed: [November 2026 Patch Tuesday forecast: Old software continues to bite]() Original publisher: [Read original article]() Author: Help Net Security Published: 2026-11-06T07:00:48Z Content type: news Language: en Sources: [Help Net Security]() Topics: [cve remediation](), [snyk-security-intel]() Tags: [2014](), [2026](), [cve](), [cve-2026-96951](), [cves](), [cybersecurity](), [don-t-miss](), [expert-analysis](), [forecast](), [hot-stuff](), [microsoft](), [net](), [net-11](), [net-8](), [net-framework](), [news](), [november-2026](), [october](), [october-2026](), [opinion](), [patch](), [patch-tuesday](), [predictions](), [security](), [software](), [update](), [zero-day]() ### AI overview The article's practical takeaway is to patch actively exploited flaws promptly and keep removing obsolete software: even final-patched or abandoned apps can remain network-connected and expose systems. PHP2Shell (CVE-2026-109618/109619) was exploited before patches appeared; applying the fix requires replacing the PHP runtime and restarting the web server, since old code otherwise stays in memory. Microsoft's emergency Brotli-related .NET fix covered .NET 8, 9, 10 and .NET 11 RC3; proof-of-concept code existed, but the article reported no known in-the-wild exploitation. Microsoft also removed seven compromised certificate entries from Windows trust and said preview fixes for VPN failures and Smart App Control would enter the November cumulative release. Apple's October updates addressed many CVEs, including a backported iOS/iPadOS fix for a CoreGraphics flaw reportedly exploited against targeted individuals. The November release expectations for Microsoft, Adobe, Google and Mozilla are forecasts, not confirmed releases. ### Source excerpt How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly scheduled update nearly two and a half hours late, but Microsoft did resolve another record-breaking 1,407 unique CVEs. As in previous months, there were limited CVEs we needed to immediately deal with. In October, one zero-day CVE-2026-96951 ... More -> The post November 2026 Patch Tuesday forecast: Old software continues to bite appeared first on Help Net Security. ## Get Ready for .NET Conf 2026! DevFeed: [Get Ready for .NET Conf 2026!]() Original publisher: [Read original article]() Author: .NET Team Published: 2026-11-03T17:30:00Z Content type: news Language: en Sources: [.NET Blog]() Topics: [.NET Conf](), [.NET](), [Developer Events](), [ASP.NET Core](), [ASP.NET](), [.NET MAUI](), [C#]() Tags: [agentic-ui](), [agents](), [ai](), [asp-net-core](), [aspire](), [blazor](), [c-sharp](), [c-sharp-dev-kit](), [community](), [conference](), [copilot](), [debugging-and-diagnostics](), [developer-workflow](), [dotnet-cli](), [net](), [net-11](), [net-conf](), [net-conf-2026](), [net-maui](), [virtual-event](), [visual-studio]() ### AI overview .NET Conf 2026 is a free virtual event running November 10-13, with the official .NET 11 launch and two days each of Microsoft and community-led sessions. Microsoft sessions begin November 10 at 8 AM PST with a keynote on .NET 11 and Copilot and agents in .NET development; November 11 focuses on Visual Studio and developer deep dives. Topics include C#, ASP.NET Core and Blazor, .NET MAUI, AI tooling, debugging, and modernization. The November 12-13 Community Days are organized by volunteers and feature developers' project experiences; their agenda and viewing details are on dotnetconf.net. Microsoft's agenda and conference information are at dot.net/conf, where attendees can select a time zone and add sessions to their calendars. ### Source excerpt .NET Conf is one week away! Join us November 10-13 for the launch of .NET 11, two days of Microsoft sessions, and two days of Community Days. The post Get Ready for .NET Conf 2026! appeared first on .NET Blog. ## Blazor Welcomes Open-Source Contributions from Syncfusion DevFeed: [Blazor Welcomes Open-Source Contributions from Syncfusion]() Original publisher: [Read original article]() Author: Daniel Roth Published: 2026-10-29T15:00:00Z Content type: news Language: en Sources: [.NET Blog]() Topics: [Blazor](), [.NET](), [ASP.NET Core](), [Open Source](), [open source maintenance](), [Maintainers](), [open source communities]() Tags: [2026](), [accessibility](), [ai](), [ai-coding-assistants](), [asp-net-core](), [blazor](), [community](), [component](), [components](), [configuration](), [contributions](), [features](), [free](), [net](), [net-11](), [net-maui](), [open-source](), [syncfusion](), [syncfusion-toolkit-for-blazor](), [tooling](), [toolkit]() ### AI overview Syncfusion's Blazor collaboration combines a free MIT-licensed UI toolkit with engineering contributions to ASP.NET Core and .NET scaffolding. The toolkit offers reusable controls including charts, calendars, inputs, dialogs, and tooltips; it is available for commercial use without a license key or Community License eligibility, and is distinct from Syncfusion's broader commercial suite. Existing projects can add it with `dotnet add package Syncfusion.Blazor.Toolkit`, then configure services, namespaces, and theming, or start from repository templates. Merged contributions include Blazor and scaffolding fixes, repaired regression tests, and more than 60 end-to-end scenarios for .NET 11 Blazor features. A setup scaffolder and an AI coding assistant skill are also being contributed, but both remain under review. ### Source excerpt Microsoft and Syncfusion are collaborating on Blazor through a free, open-source component toolkit, framework contributions, and developer tooling. The post Blazor Welcomes Open-Source Contributions from Syncfusion appeared first on .NET Blog. ## Blazor Welcomes Open-Source Contributions from Infragistics DevFeed: [Blazor Welcomes Open-Source Contributions from Infragistics]() Original publisher: [Read original article]() Author: Daniel Roth Published: 2026-10-27T15:00:00Z Content type: news Language: en Sources: [.NET Blog]() Topics: [Blazor](), [Open Source](), [.NET](), [ASP.NET Core]() Tags: [accessibility](), [agents](), [ai](), [ai-coding-assistants](), [asp-net-core](), [assistive-technology](), [authentication](), [blazor](), [blazor-analyzers](), [coding-assistants](), [components](), [contributions](), [developer-tooling](), [free](), [ignite-ui](), [infragistics](), [net](), [net-11](), [open-source](), [open-source-components](), [tooling]() ### AI overview Infragistics has open-sourced more than 50 Ignite UI for Blazor controls under the MIT license, including inputs, navigation, layout controls, and the lightweight Grid Lite. The free packages are a subset of its broader commercial offering: install core controls with `IgniteUI.Blazor.Lite` and Grid Lite separately with `IgniteUI.Blazor.GridLite`, then follow the repository setup instructions. Components require an interactive render mode in Blazor Web Apps. Infragistics engineers also contributed .NET 11 analyzers, now merged into ASP.NET Core, that flag issues such as unnecessary `StateHasChanged()` calls and potentially stale authentication state. A setup scaffolder contribution is still under review. The post says the components were developed with attention to performance, accessibility, security, and trimmability. ### Source excerpt Microsoft and Infragistics are collaborating on Blazor through free, open-source components, new .NET 11 analyzers, and developer tooling. The post Blazor Welcomes Open-Source Contributions from Infragistics appeared first on .NET Blog. ## Microsoft Releases Out-of-Band .NET Security Updates: Four Vulnerabilities Addressed DevFeed: [Microsoft Releases Out-of-Band .NET Security Updates: Four Vulnerabilities Addressed]() Original publisher: [Read original article]() Author: PravinKarthik Published: 2026-10-26T17:22:12Z Content type: news Language: en Sources: [Cyber Newsroom]() Topics: [.NET](), [Vulnerabilities](), [cve remediation](), [Security](), [ASP.NET](), [Linux]() Tags: [brotli](), [buffer](), [buffer-overflow](), [cve](), [cve-2026-111497](), [cve-2026-114148](), [dotnet](), [microsoft](), [net](), [net-10](), [net-11](), [net-8](), [net-9](), [october](), [oob-patches](), [out-of-band](), [releases](), [security](), [security-updates](), [updates](), [vulnerabilities](), [vulnerability]() ### AI overview Microsoft's October 25, 2026 out-of-band .NET updates address four vulnerabilities, including two fixes that correct issues left unresolved by the October 13 updates. The risks differ by component: Brotli decompression can expose applications processing untrusted compressed data; affected Linux tarball ownership metadata can enable local file modification and privilege escalation; and the corrected SocketAsyncEventArgs fix covers .NET 8-11, while the Blazor WebAssembly debugger issue affects .NET 10-11 and requires updating specific server and dev-server package references. Deploy the applicable patched release (8.0.33, 9.0.22, 10.0.14, or .NET 11 RC3), rebuild self-contained applications and containers, review affected Linux installations, and verify production versions. `dotnet --list-runtimes` checks shared runtimes but does not reveal runtimes bundled with self-contained or NativeAOT applications. .NET Framework is not affected by the described Brotli vulnerability. ### Source excerpt Microsoft Releases Out-of-Band .NET Security Updates: Four Vulnerabilities Addressed Microsoft released out-of-band security updates for .NET on October 25, 2026, outside its regular monthly servicing schedule.The release addresses a buffer overflow vulnerability in Brotli decompressi ... Read more Published Date: Oct 26, 2026 (2 hours, 22 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-111497 CVE-2026-70197 CVE-2026-102870 CVE-2026-114148 ## Microsoft releases emergency .NET patches for critical Brotli flaw DevFeed: [Microsoft releases emergency .NET patches for critical Brotli flaw]() Original publisher: [Read original article]() Author: Sergiu Gatlan Published: 2026-10-26T15:38:24Z Content type: news Language: en Sources: [BleepingComputer]() Topics: [.NET](), [patches](), [Microsoft](), [ASP.NET Core]() Tags: [2026](), [broccoli2shell](), [brotli](), [computer-help](), [computers](), [critical](), [critical-vulnerability](), [emergency](), [emergency-update](), [http2shell](), [linux](), [mac](), [malware](), [malware-removal](), [microsoft](), [net](), [net-10](), [net-11](), [net-8](), [net-9](), [node2shell](), [out-of-band](), [patch](), [patches](), [releases](), [security](), [security-update](), [security-updates](), [spyware](), [support](), [tech-support](), [technical-support](), [updates](), [virus](), [virus-removal](), [vulnerability](), [windows]() ### AI overview Microsoft issued out-of-band security updates for .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3 to fix CVE-2026-111497, a critical out-of-bounds write in Brotli decompression also called Broccoli2Shell, Node2Shell, and HTTP2Shell. A malicious compressed stream can cause crashes or memory leaks and may enable remote code execution; the advisory also describes remote privilege escalation on unpatched .NET systems using non-default configurations. Applications are exposed when they opt into ASP.NET Core request decompression or HttpClient automatic response decompression, or invoke .NET Brotli APIs; decompression is not enabled by default. PoC exploits are public, but the excerpt reports no malicious exploitation in the wild. Microsoft advises updating promptly. If patching is delayed, block incoming Brotli-compressed requests through a proxy or firewall, or disable Brotli decoding. Updating the system Brotli library may not protect applications that bundle their own copy. ### Source excerpt Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...] ## .NET October 2026 Out-of-Band Security Updates DevFeed: [.NET October 2026 Out-of-Band Security Updates]() Original publisher: [Read original article]() Author: Rahul Bhandari (MSFT) Published: 2026-10-25T18:45:00Z Content type: release Language: en Sources: [.NET Blog]() Topics: [.NET](), [Security](), [ASP.NET Core]() Tags: [2026](), [algorithm](), [apis](), [application](), [applications](), [artifacts](), [brotli](), [cve-2026-111497](), [cve-2026-114148](), [maintenance-updates](), [net](), [net-10](), [net-11](), [net-8](), [net-9](), [net-framework](), [october](), [oob](), [out-of-band](), [ownership](), [security](), [security-updates](), [updates](), [vulnerability]() ### AI overview The October 2026 out-of-band updates for .NET 8, 9, and 10 and .NET 11 RC3 address Brotli decoder vulnerability CVE-2026-111497 and Linux tarball ownership vulnerability CVE-2026-114148, and provide fixes for two issues not fully addressed by the October 13 release. Brotli processing may be affected through ASP.NET Core request decompression, HttpClient automatic response decompression, or System.IO.Compression APIs; the two decompression features are off by default, and .NET Framework is unaffected. The tarball issue affects source-build tarballs for .NET 10 and 11, and also ASP.NET Core tarball distributions for .NET 8 and 9. To update, install the targeted runtime and restart framework-dependent apps; rebuild and republish self-contained apps; rebuild and redeploy containers with updated images; or use updated source-build artifacts and rebuild packages. ASP.NET Core tarball users on .NET 8 and 9 should install the refreshed tarball. .NET 11 RC2 users should move to RC3. ### Source excerpt Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability. The post .NET October 2026 Out-of-Band Security Updates appeared first on .NET Blog. ## C# 15 Union Types for API Results: Examples, Trade-Offs, and Migration DevFeed: [C# 15 Union Types for API Results: Examples, Trade-Offs, and Migration]() Original publisher: [Read original article]() Author: Arunachalam Kandasamy Raja Published: 2026-10-21T14:17:46Z Content type: article Language: en Sources: [Syncfusion]() Topics: [union types](), [ASP.NET]() Tags: [api](), [asp-net-core](), [business](), [c-sharp](), [c-sharp-15](), [c-sharp-15-union-types](), [c-sharp-discriminated-unions](), [c-sharp-result-pattern](), [c-sharp-union-types](), [c-sharp-union-types-in-asp-net-core](), [cases](), [compare](), [compatibility](), [compilation](), [compiler](), [examples](), [microsoft](), [migration](), [net-11](), [net-development](), [net-development-asp-net-core-c-sharp-software-architecture-web-platform-apis-what-s-new](), [net-sdk](), [results](), [software-architecture](), [software-development](), [types](), [union](), [union-types](), [web-api](), [web-platform-apis](), [what-s-new]() ### AI overview C# 15 union types represent a fixed set of result cases and let the compiler flag unhandled cases in switch expressions. In the ASP.NET Core example, a service returns distinct order outcomes while a controller maps them to HTTP responses, keeping business logic separate from HTTP handling. Unions suit closed sets of expected outcomes; interfaces better fit extensible implementations, and an established Result may already meet a project's needs. Generated unions store cases through object?, so value types may box; the text recommends measuring performance-sensitive use. JSON deserialization can be ambiguous when structural case shapes overlap, and explicit polymorphic serialization may suit APIs needing a stable discriminator. Because unions are preview features in the C# 15/.NET 11 development cycle, migration guidance is to update internal consumers first and check response contracts, OpenAPI, generated clients, and serialized or persisted data before removing an old result model. ### Source excerpt Learn how C# 15 union types simplify ASP.NET Core API results, compare with existing C# patterns, and help you decide when to adopt them. ## Microsoft Previews dotnetup: Toolchain Manager for .NET SDKs and Runtimes DevFeed: [Microsoft Previews dotnetup: Toolchain Manager for .NET SDKs and Runtimes]() Original publisher: [Read original article]() Author: Almir Vuk Published: 2026-10-21T08:15:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [.NET](), [Microsoft]() Tags: [agent-skills](), [ai](), [ai-assistants](), [azure-devops](), [cross-platform](), [daily](), [development](), [dotnetup](), [dotnetup-preview](), [latest](), [lts](), [manager](), [microsoft](), [net](), [net-10](), [net-11](), [net-9](), [net-core](), [net-sdk](), [news](), [preview](), [public](), [runtimes](), [sdks](), [toolchain](), [updates](), [user]() ### AI overview dotnetup is in public preview as a cross-platform manager for .NET SDKs and runtimes, installing them in a user directory without administrator rights in its default setup. It tracks channels such as latest, lts, preview, and daily, resolves them to releases during updates, keeps exact versions pinned, and reads the nearest global.json to support deterministic team builds. It can install supported runtimes individually and removes components no longer required. Access modes range from running .NET through dotnetup to editing shell configuration; Windows-only everywhere mode changes system PATH and requires elevation, and may take precedence over Visual Studio's machine-wide SDKs. Microsoft says commands may change during preview and recommends installers, package managers, or Visual Studio for production machines. Users also raised concerns about the curl-to-shell bootstrap, lack of package-manager options, Visual Studio visibility, and management of other CLI tools; packages are planned after user validation. ### Source excerpt Microsoft has released a public preview of dotnetup, a cross-platform toolchain manager that installs and updates .NET SDKs and runtimes in the user's own directory without admin rights. It tracks channels such as latest, lts, preview, and daily, reads global.json, and removes unused installs. Commands may still change before general availability. By Almir Vuk ## An introduction to Compact Binary Object Representation (CBOR) in .NET DevFeed: [An introduction to Compact Binary Object Representation (CBOR) in .NET]() Original publisher: [Read original article]() Author: Andrew Lock Published: 2026-10-20T10:00:00Z Content type: article Language: en Sources: [Andrew Lock | .NET Escapades]() Topics: [Data serialization](), [.NET](), [Decoding](), [JSON](), [Encoding](), [hex value](), [NuGet](), [system.text.json]() Tags: [api](), [apis](), [asp-net-core](), [base64](), [data-protection](), [data-serialization](), [introduction](), [json](), [net](), [net-10](), [net-11](), [net-core](), [net-framework](), [nuget](), [nuget-package]() ### AI overview CBOR offers a self-describing binary alternative to JSON, with native binary data, compact encodings for values such as small numbers, and support for indefinite-length collections that can help with streaming. Text payload sizes are roughly comparable to JSON, and actual savings depend on the data. The excerpt contrasts CBOR with Protobuf, which can be highly efficient but requires shared schemas, and MessagePack, which is similar but lacks CBOR's formal IETF standardization and streaming support as described here. In .NET, System.Formats.Cbor provides low-level CborWriter and CborReader APIs: callers write and read primitive values and manage structure themselves rather than automatically mapping objects. The examples cover encoding and decoding maps and arrays, selecting conformance modes such as canonical key ordering, and skipping unknown values for forward compatibility. The author suggests JSON remains suitable for most APIs and points to ASP.NET Core's use of CBOR for compact, application-specific cookie data. ### Source excerpt In this post I introduce CBOR as a JSON alternative, and show how to use the System.Formats.Cbor NuGet package to read and write CBOR encoded data ## .NET 11 Release Candidate 2: Go-Live License and Updates Across Libraries, F#, MAUI, and WinForms DevFeed: [.NET 11 Release Candidate 2: Go-Live License and Updates Across Libraries, F#, MAUI, and WinForms]() Original publisher: [Read original article]() Author: Almir Vuk Published: 2026-10-19T08:00:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [.NET](), [version](), [Cryptography](), [Continuous Delivery (CD)](), [C#](), [.NET MAUI](), [WinForms]() Tags: [c-sharp](), [candidate](), [cryptography](), [development](), [dotnet-11-rc-2](), [libraries](), [net](), [net-10](), [net-11](), [net-9](), [net-maui](), [news](), [nuget](), [post-quantum](), [quantum](), [release](), [visual-studio](), [winforms]() ### AI overview Microsoft released .NET 11 Release Candidate 2 under a go-live license, with support in Visual Studio 2026 Insiders and VS Code with the C# Dev Kit. The release includes library, runtime, SDK, NuGet, F#, ASP.NET Core, .NET MAUI, and Windows Forms changes, including experimental post-quantum cryptography APIs, file-based app directive improvements, NuGet package cooldowns, and a C# UI option for MAUI. ### Source excerpt Microsoft has released .NET 11 Release Candidate 2 under a go-live license, supported in Visual Studio 2026 Insiders. The release adds incremental CBOR reading, experimental post-quantum cryptography APIs, file-based app directive improvements, NuGet package cooldowns, F# runtime async building blocks, a C# UI option for .NET MAUI, and refined Windows Forms visual styles. By Almir Vuk ## Announcing .NET 11 Release Candidate 2 DevFeed: [Announcing .NET 11 Release Candidate 2]() Original publisher: [Read original article]() Author: .NET Team Published: 2026-10-13T19:40:00Z Content type: release Language: en Sources: [.NET Blog]() Topics: [.NET](), [Release notes](), [Continuous Delivery (CD)](), [release engineering]() Tags: [asp-net-core](), [f-sharp](), [featured](), [forms](), [msbuild](), [net](), [net-11](), [net-maui](), [nuget](), [release](), [sdk](), [winforms]() ### AI overview The .NET 11 Release Candidate 2 is available with go-live support for production applications. The release includes improvements across libraries, runtime, SDK, MSBuild, NuGet, F#, ASP.NET Core, .NET MAUI, and Windows Forms, and is supported by Visual Studio 2026 Insiders and Visual Studio Code with the C# Dev Kit. ### Source excerpt .NET 11 Release Candidate 2 is available with improvements across libraries, runtime, SDK, MSBuild, NuGet, F#, ASP.NET Core, .NET MAUI, and Windows Forms. The post Announcing .NET 11 Release Candidate 2 appeared first on .NET Blog. ## A faster, lighter C# Dev Kit DevFeed: [A faster, lighter C# Dev Kit]() Original publisher: [Read original article]() Author: Drew Noakes Published: 2026-10-06T17:05:00Z Content type: article Language: en Sources: [.NET Blog]() Topics: [Visual Studio Code](), [SDK]() Tags: [agents](), [build-times](), [c-sharp-dev-kit](), [cache](), [compilation](), [dev](), [lighter](), [msbuild](), [native-aot](), [net](), [net-11](), [net-11-c-sharp](), [performance](), [visual-studio-code]() ### AI overview C# Dev Kit 11.0 has been rearchitected to improve solution loading, incremental builds, memory use, and project-file editing in Visual Studio Code. The post describes project caching, a consolidated Native AOT server, MSBuild language support, and a C# Doctor tool for diagnosing project setup problems. The release is available in pre-release. ### Source excerpt C# Dev Kit has been rebuilt to open solutions in about a second and run on a fraction of the memory, and this post walks through what changed for you. The post A faster, lighter C# Dev Kit appeared first on .NET Blog. ## Aspire 13.6 Adds Persistent Dashboard Telemetry and First-Party Java and Rust Hosting DevFeed: [Aspire 13.6 Adds Persistent Dashboard Telemetry and First-Party Java and Rust Hosting]() Original publisher: [Read original article]() Author: Almir Vuk Published: 2026-10-05T09:39:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [Aspire]() Tags: [aspire](), [azure-container-apps](), [blazor](), [cloud-native-architecture](), [credentials](), [dashboard](), [data](), [database](), [debugging](), [deployment](), [development](), [dotnet-aspire-13-6-release](), [encryption](), [environment](), [environments](), [image](), [local](), [mongodb](), [net](), [net-10](), [net-11](), [net-aspire](), [net-core](), [news](), [release](), [resources](), [sqlite](), [telemetry]() ### AI overview Microsoft's Aspire 13.6 release adds persistent dashboard telemetry and run history, prerelease hosting integrations for Java and Rust, portable volume paths, and new CLI and editor workflows. The release also includes breaking changes such as automatic TLS for local MongoDB resources and a new default Cosmos DB emulator image. ### Source excerpt Microsoft has released Aspire 13.6. The dashboard now stores telemetry in SQLite and keeps up to ten completed runs per application. The release adds prerelease hosting packages for Java and Rust, portable volume paths, and new CLI options. Breaking changes include automatic TLS for local MongoDB resources and a new default Cosmos DB emulator image. By Almir Vuk ## Build Agentic UI with the new Blazor AI components DevFeed: [Build Agentic UI with the new Blazor AI components]() Original publisher: [Read original article]() Author: Daniel Roth Published: 2026-09-28T17:05:00Z Content type: tutorial Language: en Sources: [.NET Blog]() Topics: [Blazor](), [Agentic AI](), [AI for interactive applications](), [Angular]() Tags: [ag-ui](), [agent-framework](), [agentic-ui](), [ai](), [asp-net-core](), [aspire](), [blazor](), [c-sharp](), [components](), [microsoft-agent-framework](), [microsoft-extensions-ai](), [microsoft-foundry](), [net](), [net-11](), [ui]() ### AI overview The article introduces experimental Blazor AI components for building agentic user interfaces. It describes components that render streamed agent interactions, expose observable state, and support shared application data that users and agents can update. It also points to an AgenticUI sample combining these components with tools from the .NET ecosystem. ### Source excerpt Build Agentic UI with the new Blazor AI components for streamed content, tools, approvals, shared state, and generative experiences. The post Build Agentic UI with the new Blazor AI components appeared first on .NET Blog. ## Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8 DevFeed: [Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8]() Original publisher: [Read original article]() Author: Andrew Lock Published: 2026-09-22T10:00:00Z Content type: tutorial Language: en Sources: [Andrew Lock | .NET Escapades]() Topics: [ASP.NET Core](), [Authentication](), [.NET](), [browser](), [Cookies](), [private key](), [public key](), [HTTP](), [Server]() Tags: [asp-net-core](), [authentication](), [browser](), [c-sharp](), [cookies](), [http](), [net](), [net-11](), [net-11-c-sharp-asp-net-core-security](), [private-key](), [public-key](), [security]() ### AI overview This tutorial explores experimental Device Bound Session Credentials support in .NET 11 through the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package. It explains how to use DBSC with an ASP.NET Core Identity application and describes its request flow and implementation details. ### Source excerpt In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package ## Hackers Stole Flock's Camera Software, Revealing How the Company Tracks Cars and People DevFeed: [Hackers Stole Flock's Camera Software, Revealing How the Company Tracks Cars and People]() Original publisher: [Read original article]() Author: EditorDavid Published: 2026-09-17T16:04:00Z Content type: news Language: en Sources: [Slashdot]() Topics: [Computer vision](), [Encryption](), [Software](), [data](), [Cryptography]() Tags: [camera](), [encryption](), [flock](), [image](), [logs](), [net-11](), [people](), [privacy](), [software](), [vision]() ### AI overview A joint investigation analyzed data copied from a Flock roadway camera after hackers breached the device. The recovered files showed that its on-device software detects people, vehicles, license plates, bicycles, and some graphics, while logs documented extensive image generation and vehicle activity. ### Source excerpt "Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED," according to an article published on both sites. Though Flock has described its system as protected by on-device encryption, "The hackers were able to copy the camera's storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections." The hackers shared the material with 404 Media and the transparency nonprofit Distributed Denial of Secrets, which shared the data with WIRED. 404 Media and WIRED then analyzed those files as part of a joint investigation... [T]he joint analysis of the recovered data shows that software running on the device explicitly detects people as well as vehicles, license plates, and bicycles. The camera can produce dozens of images of a single passing vehicle and, according to several weeks of recovered logs, generated more than a million images. Its computer-vision software also sometimes isolated bumper stickers and other graphics, including, in one case, an American flag patch on a motorcyclist's saddlebag... According to our analysis, the camera's logs recorded about 21 days of activity across several periods. During those windows, the device photographed roughly 50,200 vehicles and generated about 1.6 million images. On a typical day, it logged around 3,300 vehicles, with a high of 4,454... The software running on the camera explicitly detects people, something which is typically overlooked in discussions around Flock cameras. When it spots a person, it records where they appear in the image and how confident it is in the detection. It was a collective calling itself stegan0gram that breached the cameras, according to the interview they did with Wired and 404 Media. "Why just destroy them when we can reverse engineer them and find the secrets of those spying on us?" Read more of this story at Slashdot. ## Build Modern .NET MAUI Apps with .NET 11 \[Webinar Show Notes\] DevFeed: [Build Modern .NET MAUI Apps with .NET 11 \[Webinar Show Notes\]]() Original publisher: [Read original article]() Author: Carter Harris Published: 2026-09-17T10:31:35Z Content type: tutorial Language: en Sources: [Syncfusion]() Topics: [.NET MAUI](), [.NET](), [cross-platform](), [software-development](), [native aot](), [XAML](), [Mobile]() Tags: [ai-assisted-development](), [authentication](), [coreclr-runtime](), [cross-platform](), [desktop](), [developer](), [maui](), [mobile](), [native-aot](), [net-11](), [net-11-net-maui-desktop-maui-mobile-webinar-what-s-new](), [net-maui](), [net-maui-apps-with-net-11](), [webinar](), [what-s-new](), [what-s-new-in-net-11](), [what-s-new-in-net-11-for-net-maui](), [xaml](), [xaml-improvements]() ### AI overview Webinar show notes covering .NET MAUI features in .NET 11, including the CoreCLR runtime, Native AOT, XAML improvements, navigation, gestures, maps, authentication, and cross-platform application development across Android, iOS, Mac Catalyst, and Windows. ### Source excerpt Discover the latest .NET MAUI 11 features, including CoreCLR, XAML improvements, Native AOT, navigation updates, and developer productivity enhancements. ## Performance Improvements in .NET 11 DevFeed: [Performance Improvements in .NET 11]() Original publisher: [Read original article]() Author: Stephen Toub - MSFT Published: 2026-09-15T12:00:00Z Content type: article Language: en Sources: [.NET Blog]() Topics: [.NET]() Tags: [blog](), [improvements](), [net](), [net-11](), [performance](), [post]() ### AI overview This post surveys hundreds of performance improvements in .NET 11, including runtime and library changes that reduce bounds checks, allocations, locks, loop cycles, redundant checks, instructions, system calls, and array-copy costs. ### Source excerpt Take a tour through hundreds of performance improvements in .NET 11. The post Performance Improvements in .NET 11 appeared first on .NET Blog. ## Microsoft Releases .NET 11 RC1 with Go-Live Support, C# 15 and F# 11 as Default Language Versions DevFeed: [Microsoft Releases .NET 11 RC1 with Go-Live Support, C# 15 and F# 11 as Default Language Versions]() Original publisher: [Read original article]() Author: Almir Vuk Published: 2026-09-15T07:11:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [.NET](), [C#](), [Microsoft](), [releases](), [ASP.NET Core](), [F#](), [SignalR](), [SDK](), [.NET MAUI](), [native aot]() Tags: [android](), [api](), [asp-net-core](), [c-sharp-15](), [development](), [dotnet-11-rc-1-release](), [f-sharp](), [ios](), [macos](), [microsoft](), [native-aot](), [net](), [net-10](), [net-11](), [net-9](), [net-core](), [net-maui](), [news](), [releases](), [sdk](), [signalr]() ### AI overview Microsoft released .NET 11 Release Candidate 1 with go-live support for production use. It makes C# 15 and F# 11 the default language versions and stabilizes features from the preview cycle. The release also extends testing across mobile and desktop targets, updates SignalR authentication refresh APIs, and adds SDK, ASP.NET Core, Blazor, and Native AOT-related improvements. ### Source excerpt Last week, Microsoft has released .NET 11 Release Candidate 1, the first release candidate of the cycle, shipping with a go-live support license for production use. The release makes C# 15 and F# 11 the default language versions, extends dotnet test to mobile and desktop targets, finalizes the SignalR authentication refresh APIs, and improves Android build times in .NET MAUI. By Almir Vuk ## Use C# unions and closed hierarchies in ASP.NET Core DevFeed: [Use C# unions and closed hierarchies in ASP.NET Core]() Original publisher: [Read original article]() Author: Dmitrii Korolev Published: 2026-09-10T17:00:00Z Content type: tutorial Language: en Sources: [.NET Blog]() Topics: [C#](), [ASP.NET Core](), [.NET](), [Polymorphism]() Tags: [asp-net-core](), [blazor](), [c-sharp](), [c-sharp-15](), [closed-hierarchies](), [json](), [minimal-api](), [mvc](), [net](), [net-11](), [openapi](), [polymorphism](), [signalr](), [system-text-json](), [union-types]() ### AI overview Explains how C# unions and closed hierarchies model API values with a fixed set of possible types in ASP.NET Core. It contrasts unions with open inheritance-based polymorphism and describes System.Text.Json support. ### Source excerpt Learn how C# unions and closed hierarchies work with System.Text.Json across ASP.NET Core Minimal APIs, MVC, SignalR, Blazor, and OpenAPI. The post Use C# unions and closed hierarchies in ASP.NET Core appeared first on .NET Blog. ## AlmaLinux 10.3 Beta Now Available! DevFeed: [AlmaLinux 10.3 Beta Now Available!]() Original publisher: [Read original article]() Author: Eduard Abdullin The Release; Automation Engineer Published: 2026-09-10T00:00:00Z Content type: release Language: en Sources: [AlmaLinux]() Topics: [Linux](), [Release notes](), [Security](), [Buildah](), [podman](), [Compiler](), [LLVM](), [Rust](), [Node.js](), [virtualization](), [.NET](), [qemu]() Tags: [beta](), [buildah](), [gcc](), [linux](), [llvm](), [net-11](), [node-js](), [podman](), [qemu](), [release](), [rust](), [x86](), [x86-64]() ### AI overview AlmaLinux announces the availability of AlmaLinux 10.3 Beta for supported x86, ARM64, IBM PowerPC, and IBM Z architectures. The release includes updated compiler toolsets, language runtimes, virtualization components, graphics, security packages, ModSecurity with OWASP Core Rule Set 4, and a coordinated Podman container-stack update. ### Source excerpt Hello Community! The AlmaLinux OS Foundation is announcing the availability of AlmaLinux 10.3 Beta "Mauve Lion" for all supported architectures: Intel/AMD (x86_64) Intel/AMD (x86_64_v2) Intel/AMD 32-bit (i686) ARM64 (aarch64) IBM PowerPC (ppc64le) IBM Z (s390x) Beta ISOs are available at repo.almalinux.org. A usual reminder: this is a BETA release. It should not be used for production installations. The provided upgrade instructions should not be used on production machines unless you don't mind if something breaks. If you are looking to see how things are going to work in stable, you are on the right track. ## Announcing .NET 11 Release Candidate 1 DevFeed: [Announcing .NET 11 Release Candidate 1]() Original publisher: [Read original article]() Author: .NET Team Published: 2026-09-08T21:30:00Z Content type: release Language: en Sources: [.NET Blog]() Topics: [.NET](), [WinForms]() Tags: [announcements](), [asp-net-core](), [c-sharp](), [f-sharp](), [featured](), [net](), [net-11](), [net-maui](), [nuget](), [production](), [release](), [release-notes](), [updates](), [visual-studio](), [visual-studio-2026](), [windows](), [winforms]() ### AI overview .NET 11 Release Candidate 1 is available with a go-live support license. It includes updates across the runtime, SDK, MSBuild, NuGet, C#, F#, ASP.NET Core, .NET MAUI, and Windows Forms. ### Source excerpt .NET 11 Release Candidate 1 is available with improvements across libraries, runtime, SDK, MSBuild, NuGet, C#, F#, ASP.NET Core, .NET MAUI, and Windows Forms. The post Announcing .NET 11 Release Candidate 1 appeared first on .NET Blog. ## dotInsights | September 2026 DevFeed: [dotInsights | September 2026]() Original publisher: [Read original article]() Author: Rachel Appel Published: 2026-09-08T14:16:12Z Content type: article Language: en Sources: [JetBrains]() Topics: [.NET](), [Software Engineering](), [AI Development](), [ASP.NET Core](), [Uno Platform](), [Model Context Protocol]() Tags: [ai](), [asp-net-core](), [c-sharp](), [community](), [dotinsights](), [mcp](), [net](), [net-11](), [net-tools](), [september-2026](), [uno-platform]() ### AI overview A dotInsights newsletter roundup of recent .NET and software-development articles, with a note about the open-source C# Roslyn compiler and links covering performance, security, AI, web development, architecture, and tooling. ### Source excerpt Did you know? Fun fact: The C# compiler (Roslyn) is open source and written in C#. It exposes APIs to analyze and generate code. Welcome to dotInsights by JetBrains! This newsletter is the home for recent .NET and software development related information. 🔗 Links Here's the latest from the developer community. ☕ Coffee Break Take [...] [Next page]()