# .NET Framework

Published articles for .NET Framework.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## November 2026 Patch Tuesday forecast: Old software continues to bite

DevFeed: [November 2026 Patch Tuesday forecast: Old software continues to bite](<https://devfeed.tech/articles/november-2026-patch-tuesday-forecast-old-software-continues-to-bite-119967.md>)

Original publisher: [Read original article](<https://www.helpnetsecurity.com/2026/11/06/november-2026-patch-tuesday-forecast/>)

Author: Help Net Security

Published: 2026-11-06T07:00:48Z

Content type: news

Language: en

Sources: [Help Net Security](<https://devfeed.tech/sources/help-net-security.md>)

Topics: [cve remediation](<https://devfeed.tech/topics/cve-remediation.md>), [snyk-security-intel](<https://devfeed.tech/topics/snyk-security-intel.md>)

Tags: [2014](<https://devfeed.tech/tags/2014.md>), [2026](<https://devfeed.tech/tags/2026.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2026-96951](<https://devfeed.tech/tags/cve-2026-96951.md>), [cves](<https://devfeed.tech/tags/cves.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [don-t-miss](<https://devfeed.tech/tags/don-t-miss.md>), [expert-analysis](<https://devfeed.tech/tags/expert-analysis.md>), [forecast](<https://devfeed.tech/tags/forecast.md>), [hot-stuff](<https://devfeed.tech/tags/hot-stuff.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [net](<https://devfeed.tech/tags/net.md>), [net-11](<https://devfeed.tech/tags/net-11.md>), [net-8](<https://devfeed.tech/tags/net-8.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [news](<https://devfeed.tech/tags/news.md>), [november-2026](<https://devfeed.tech/tags/november-2026.md>), [october](<https://devfeed.tech/tags/october.md>), [october-2026](<https://devfeed.tech/tags/october-2026.md>), [opinion](<https://devfeed.tech/tags/opinion.md>), [patch](<https://devfeed.tech/tags/patch.md>), [patch-tuesday](<https://devfeed.tech/tags/patch-tuesday.md>), [predictions](<https://devfeed.tech/tags/predictions.md>), [security](<https://devfeed.tech/tags/security.md>), [software](<https://devfeed.tech/tags/software.md>), [update](<https://devfeed.tech/tags/update.md>), [zero-day](<https://devfeed.tech/tags/zero-day.md>)

### AI overview

The article's practical takeaway is to patch actively exploited flaws promptly and keep removing obsolete software: even final-patched or abandoned apps can remain network-connected and expose systems. PHP2Shell (CVE-2026-109618/109619) was exploited before patches appeared; applying the fix requires replacing the PHP runtime and restarting the web server, since old code otherwise stays in memory. Microsoft's emergency Brotli-related .NET fix covered .NET 8, 9, 10 and .NET 11 RC3; proof-of-concept code existed, but the article reported no known in-the-wild exploitation. Microsoft also removed seven compromised certificate entries from Windows trust and said preview fixes for VPN failures and Smart App Control would enter the November cumulative release. Apple's October updates addressed many CVEs, including a backported iOS/iPadOS fix for a CoreGraphics flaw reportedly exploited against targeted individuals. The November release expectations for Microsoft, Adobe, Google and Mozilla are forecasts, not confirmed releases.

### Source excerpt

How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly scheduled update nearly two and a half hours late, but Microsoft did resolve another record-breaking 1,407 unique CVEs. As in previous months, there were limited CVEs we needed to immediately deal with. In October, one zero-day CVE-2026-96951 ... More -> The post November 2026 Patch Tuesday forecast: Old software continues to bite appeared first on Help Net Security.

## AWS Elastic Beanstalk for regulated workloads: Built for the next decade, not just the first deploy

DevFeed: [AWS Elastic Beanstalk for regulated workloads: Built for the next decade, not just the first deploy](<https://devfeed.tech/articles/aws-elastic-beanstalk-for-regulated-workloads-built-for-the-next-decade-not-just-the-first-deploy-106412.md>)

Original publisher: [Read original article](<https://thenewstack.io/elastic-beanstalk-regulated-workloads/>)

Author: Sabari Sawant

Published: 2026-10-29T14:00:00Z

Content type: opinion

Language: en

Sources: [The New Stack](<https://devfeed.tech/sources/the-new-stack.md>)

Topics: [CI/CD](<https://devfeed.tech/topics/cicd.md>), [internal developer platform](<https://devfeed.tech/topics/internal-developer-platform.md>)

Tags: [abstraction](<https://devfeed.tech/tags/abstraction.md>), [access-controls](<https://devfeed.tech/tags/access-controls.md>), [account](<https://devfeed.tech/tags/account.md>), [aerospace](<https://devfeed.tech/tags/aerospace.md>), [application](<https://devfeed.tech/tags/application.md>), [application-platform](<https://devfeed.tech/tags/application-platform.md>), [applications](<https://devfeed.tech/tags/applications.md>), [audit](<https://devfeed.tech/tags/audit.md>), [auto-scaling](<https://devfeed.tech/tags/auto-scaling.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-elastic-beanstalk](<https://devfeed.tech/tags/aws-elastic-beanstalk.md>), [aws-marketplace](<https://devfeed.tech/tags/aws-marketplace.md>), [capacity](<https://devfeed.tech/tags/capacity.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloud-services](<https://devfeed.tech/tags/cloud-services.md>), [code](<https://devfeed.tech/tags/code.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [deploy](<https://devfeed.tech/tags/deploy.md>), [industry](<https://devfeed.tech/tags/industry.md>), [managed](<https://devfeed.tech/tags/managed.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [platform](<https://devfeed.tech/tags/platform.md>), [platform-engineering](<https://devfeed.tech/tags/platform-engineering.md>), [post-contributed](<https://devfeed.tech/tags/post-contributed.md>), [sponsor-aws-marketplace](<https://devfeed.tech/tags/sponsor-aws-marketplace.md>), [sponsored-post-contributed](<https://devfeed.tech/tags/sponsored-post-contributed.md>)

### AI overview

For regulated workloads, a platform must support long-term operations as well as quick deployment: patching, runtime support, audit evidence, and consistent controls across application portfolios. The article presents AWS Elastic Beanstalk as a managed option that deploys existing applications, including Java, .NET Framework on IIS, PHP, and Python, without requiring every workload to be containerized. It provisions and maintains AWS resources while environments remain in the customer's AWS account, preserving visibility into identity, networking, security, and governance. The article says Elastic Beanstalk is HIPAA-eligible and in scope for AWS SOC, PCI, ISO, and FedRAMP reports, available through AWS Artifact. Its new Cluster Mode lets multiple applications share managed infrastructure and a common operational baseline; application code and dependency patching remain workload-specific. The case for this model is reducing operational drift and duplicated platform controls as portfolios grow, while retaining customer visibility. The excerpt emphasizes service continuity, but does not provide comparative performance, pricing, or implementation results.

### Source excerpt

For more than a decade, the managed application platform industry has optimized around a compelling promise: get code running as The post AWS Elastic Beanstalk for regulated workloads: Built for the next decade, not just the first deploy appeared first on The New Stack.

## Microsoft's October Security Update Fixes 1,400+ Vulnerabilities, One Exploited in the Wild

DevFeed: [Microsoft's October Security Update Fixes 1,400+ Vulnerabilities, One Exploited in the Wild](<https://devfeed.tech/articles/microsoft-s-october-security-update-fixes-1-400-vulnerabilities-one-exploited-in-the-wild-104258.md>)

Original publisher: [Read original article](<https://www.infoq.com/news/2026/10/microsoft-october-2026-patch/>)

Author: Sergio De Simone

Published: 2026-10-28T10:30:00Z

Content type: news

Language: en

Sources: [InfoQ](<https://devfeed.tech/sources/infoq.md>)

Topics: [known exploitable vulnerabilities](<https://devfeed.tech/topics/known-exploitable-vulnerabilities.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [Security](<https://devfeed.tech/topics/security.md>), [cve remediation](<https://devfeed.tech/topics/cve-remediation.md>), [Deployment Strategies](<https://devfeed.tech/topics/deployment-strategies.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [architecture-design](<https://devfeed.tech/tags/architecture-design.md>), [azure](<https://devfeed.tech/tags/azure.md>), [critical](<https://devfeed.tech/tags/critical.md>), [development](<https://devfeed.tech/tags/development.md>), [devops](<https://devfeed.tech/tags/devops.md>), [edge](<https://devfeed.tech/tags/edge.md>), [exchange](<https://devfeed.tech/tags/exchange.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [hyper-v](<https://devfeed.tech/tags/hyper-v.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [microsoft-october-2026-patch](<https://devfeed.tech/tags/microsoft-october-2026-patch.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [news](<https://devfeed.tech/tags/news.md>), [october](<https://devfeed.tech/tags/october.md>), [office](<https://devfeed.tech/tags/office.md>), [os](<https://devfeed.tech/tags/os.md>), [security](<https://devfeed.tech/tags/security.md>), [security-update](<https://devfeed.tech/tags/security-update.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [shell](<https://devfeed.tech/tags/shell.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [windows](<https://devfeed.tech/tags/windows.md>), [windows-shell](<https://devfeed.tech/tags/windows-shell.md>)

### AI overview

Microsoft's October update addresses 1,415 vulnerabilities across products including Windows, Office, Exchange, .NET and Edge; 85 are rated critical, and one Windows Shell flaw, CVE-2026-96951, is reported exploited in the wild. It can bypass Mark of the Web protections, but an attacker must persuade a user to open a crafted file or follow a link. The excerpt also notes that CVE-2026-108398 in .NET was publicly disclosed before the update, with no exploitation reported by Microsoft. Practitioners quoted in the source recommend prioritizing flaws rated above 9.0 and deploying patches in stages while monitoring for regressions. User reports describe KB5127648 disrupting WPA-Enterprise Wi-Fi and an update breaking IPSec VPN access on some laptops.

### Source excerpt

Microsoft's latest monthly security update addresses 1415 vulnerabilities across multiple products. One vulnerability affecting Windows Shell has been exploited in the wild, while 85 are classified as critical. Affected products include Windows OS, Office, Exchange, .NET, Edge, as well as potentially Hyper-V and Azure components. By Sergio De Simone

## The 14 GB cold-start problem: Rebuilding self-hosted GitHub Actions runners on Azure Kubernetes Service

DevFeed: [The 14 GB cold-start problem: Rebuilding self-hosted GitHub Actions runners on Azure Kubernetes Service](<https://devfeed.tech/articles/the-14-gb-cold-start-problem-rebuilding-self-hosted-github-actions-runners-on-azure-kubernetes-service-105698.md>)

Original publisher: [Read original article](<https://www.thoughtworks.com/insights/articles/rebuilding-self-hosted-github-actions-runners-on-aks>)

Author: Renicius Pagotto Fostaini

Published: 2026-10-28T00:00:00Z

Content type: article

Language: en

Sources: [Thoughtworks Insights](<https://devfeed.tech/sources/thoughtworks-insights.md>)

Topics: [Azure Kubernetes Service](<https://devfeed.tech/topics/azure-kubernetes-service.md>), [self-hosted runner](<https://devfeed.tech/topics/self-hosted-runner.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [internal developer platform automation](<https://devfeed.tech/topics/internal-developer-platform-automation.md>), [platform engineering automation](<https://devfeed.tech/topics/platform-engineering-automation.md>), [Azure](<https://devfeed.tech/topics/azure.md>)

Tags: [actions](<https://devfeed.tech/tags/actions.md>), [aks](<https://devfeed.tech/tags/aks.md>), [arc](<https://devfeed.tech/tags/arc.md>), [autoscaling](<https://devfeed.tech/tags/autoscaling.md>), [azure](<https://devfeed.tech/tags/azure.md>), [azure-container-apps](<https://devfeed.tech/tags/azure-container-apps.md>), [azure-kubernetes-service](<https://devfeed.tech/tags/azure-kubernetes-service.md>), [azure-virtual-machines](<https://devfeed.tech/tags/azure-virtual-machines.md>), [build](<https://devfeed.tech/tags/build.md>), [build-times](<https://devfeed.tech/tags/build-times.md>), [build-tools](<https://devfeed.tech/tags/build-tools.md>), [cache](<https://devfeed.tech/tags/cache.md>), [caching](<https://devfeed.tech/tags/caching.md>), [capacity](<https://devfeed.tech/tags/capacity.md>), [cold-start-problem](<https://devfeed.tech/tags/cold-start-problem.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>)

### AI overview

For this team, combining ephemeral Windows runners on Azure Kubernetes Service (AKS), GitHub Actions Runner Controller (ARC), cached container images and prebuilt toolchains reduced reported pipeline duration from about 40 minutes to 10-15 minutes. Serverless containers first enabled more parallel work and brought runs to about 30 minutes, but cold starts spent 5-10 minutes pulling a 14 GB image; on AKS, a cached pull reportedly took 10-20 seconds. The team separated lightweight runner coordination from scalable worker nodes, used off-hours scale-down, ephemeral OS disks and image garbage collection, and packaged reusable workflows for application teams. These results are specific to the implementation: scaling workers to zero can lose the cache and restore cold-start delays, while keeping warm capacity trades lower latency for idle cost. The excerpt also reports an approximately 66% compute-cost reduction (about $7,800 annualized), contingent on comparable measurement scope. AKS adds operational responsibilities; the article recommends measuring queue and end-to-end time, cold versus warm starts, costs, and behavior at configured concurrency limits.

### Source excerpt

The 14 GB cold-start problem: Rebuilding self-hosted GitHub Actions runners on Azure Kubernetes Service

## .NET October 2026 Out-of-Band Security Updates

DevFeed: [.NET October 2026 Out-of-Band Security Updates](<https://devfeed.tech/articles/net-october-2026-out-of-band-security-updates-99267.md>)

Original publisher: [Read original article](<https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates/>)

Author: Rahul Bhandari (MSFT)

Published: 2026-10-25T18:45:00Z

Content type: release

Language: en

Sources: [.NET Blog](<https://devfeed.tech/sources/net-blog.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>), [Security](<https://devfeed.tech/topics/security.md>), [ASP.NET Core](<https://devfeed.tech/topics/asp-net-core.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [algorithm](<https://devfeed.tech/tags/algorithm.md>), [apis](<https://devfeed.tech/tags/apis.md>), [application](<https://devfeed.tech/tags/application.md>), [applications](<https://devfeed.tech/tags/applications.md>), [artifacts](<https://devfeed.tech/tags/artifacts.md>), [brotli](<https://devfeed.tech/tags/brotli.md>), [cve-2026-111497](<https://devfeed.tech/tags/cve-2026-111497.md>), [cve-2026-114148](<https://devfeed.tech/tags/cve-2026-114148.md>), [maintenance-updates](<https://devfeed.tech/tags/maintenance-updates.md>), [net](<https://devfeed.tech/tags/net.md>), [net-10](<https://devfeed.tech/tags/net-10.md>), [net-11](<https://devfeed.tech/tags/net-11.md>), [net-8](<https://devfeed.tech/tags/net-8.md>), [net-9](<https://devfeed.tech/tags/net-9.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [october](<https://devfeed.tech/tags/october.md>), [oob](<https://devfeed.tech/tags/oob.md>), [out-of-band](<https://devfeed.tech/tags/out-of-band.md>), [ownership](<https://devfeed.tech/tags/ownership.md>), [security](<https://devfeed.tech/tags/security.md>), [security-updates](<https://devfeed.tech/tags/security-updates.md>), [updates](<https://devfeed.tech/tags/updates.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

The October 2026 out-of-band updates for .NET 8, 9, and 10 and .NET 11 RC3 address Brotli decoder vulnerability CVE-2026-111497 and Linux tarball ownership vulnerability CVE-2026-114148, and provide fixes for two issues not fully addressed by the October 13 release. Brotli processing may be affected through ASP.NET Core request decompression, HttpClient automatic response decompression, or System.IO.Compression APIs; the two decompression features are off by default, and .NET Framework is unaffected. The tarball issue affects source-build tarballs for .NET 10 and 11, and also ASP.NET Core tarball distributions for .NET 8 and 9. To update, install the targeted runtime and restart framework-dependent apps; rebuild and republish self-contained apps; rebuild and redeploy containers with updated images; or use updated source-build artifacts and rebuild packages. ASP.NET Core tarball users on .NET 8 and 9 should install the refreshed tarball. .NET 11 RC2 users should move to RC3.

### Source excerpt

Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability. The post .NET October 2026 Out-of-Band Security Updates appeared first on .NET Blog.

## Replacing Transactional MSMQ with RabbitMQ Without Losing Consistency

DevFeed: [Replacing Transactional MSMQ with RabbitMQ Without Losing Consistency](<https://devfeed.tech/articles/replacing-transactional-msmq-with-rabbitmq-without-losing-consistency-97413.md>)

Original publisher: [Read original article](<https://hackernoon.com/replacing-transactional-msmq-with-rabbitmq-without-losing-consistency?source=rss>)

Author: Ilnur Yusupov

Published: 2026-10-23T08:31:42Z

Content type: article

Language: en

Sources: [HackerNoon](<https://devfeed.tech/sources/hackernoon.md>)

Topics: [RabbitMQ](<https://devfeed.tech/topics/rabbitmq.md>), [Messaging](<https://devfeed.tech/topics/messaging.md>), [Transactions](<https://devfeed.tech/topics/transactions.md>), [consistency](<https://devfeed.tech/topics/consistency.md>), [acid](<https://devfeed.tech/topics/acid.md>), [schema-evolution](<https://devfeed.tech/topics/schema-evolution.md>)

Tags: [consistency](<https://devfeed.tech/tags/consistency.md>), [distributed-systems](<https://devfeed.tech/tags/distributed-systems.md>), [msmq](<https://devfeed.tech/tags/msmq.md>), [msmq-to-rabbitmq-migration](<https://devfeed.tech/tags/msmq-to-rabbitmq-migration.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [outbox](<https://devfeed.tech/tags/outbox.md>), [outbox-pattern](<https://devfeed.tech/tags/outbox-pattern.md>), [rabbitmq](<https://devfeed.tech/tags/rabbitmq.md>), [sql-server-transactions](<https://devfeed.tech/tags/sql-server-transactions.md>)

### AI overview

A direct MSMQ-to-RabbitMQ swap loses the atomicity that System.Transactions and MSDTC can provide across SQL Server and transactional MSMQ. Publishing before the SQL commit can expose an event for rolled-back data; publishing afterward can leave committed data without an event. The outbox addresses this dual-write gap by recording the business change and outgoing message in one database transaction, then dispatching to RabbitMQ asynchronously with publisher confirms and retries. A crash after broker confirmation but before marking the outbox row can cause duplicate publication, so consumers need idempotent processing, such as storing MessageId with business updates in one transaction. This replaces coordinated distributed transactions with eventual consistency and at-least-once delivery. The article also outlines operational needs such as concurrent row claiming, backoff, ordering, poison-message handling, monitoring, and cleanup, and recommends isolating messaging changes from runtime migration.

### Source excerpt

Learn why replacing transactional MSMQ with RabbitMQ changes consistency guarantees and how the outbox pattern helps preserve reliable messaging. TL;DR: Repla

## An introduction to Compact Binary Object Representation (CBOR) in .NET

DevFeed: [An introduction to Compact Binary Object Representation (CBOR) in .NET](<https://devfeed.tech/articles/an-introduction-to-compact-binary-object-representation-cbor-in-net-90927.md>)

Original publisher: [Read original article](<https://andrewlock.net/an-introduction-to-compact-binary-object-notation-in-dotnet/>)

Author: Andrew Lock

Published: 2026-10-20T10:00:00Z

Content type: article

Language: en

Sources: [Andrew Lock | .NET Escapades](<https://devfeed.tech/sources/andrew-lock-net-escapades.md>)

Topics: [Data serialization](<https://devfeed.tech/topics/data-serialization.md>), [.NET](<https://devfeed.tech/topics/net.md>), [Decoding](<https://devfeed.tech/topics/decoding.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Encoding](<https://devfeed.tech/topics/encoding.md>), [hex value](<https://devfeed.tech/topics/hex-value.md>), [NuGet](<https://devfeed.tech/topics/nuget.md>), [system.text.json](<https://devfeed.tech/topics/system-text-json.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [asp-net-core](<https://devfeed.tech/tags/asp-net-core.md>), [base64](<https://devfeed.tech/tags/base64.md>), [data-protection](<https://devfeed.tech/tags/data-protection.md>), [data-serialization](<https://devfeed.tech/tags/data-serialization.md>), [introduction](<https://devfeed.tech/tags/introduction.md>), [json](<https://devfeed.tech/tags/json.md>), [net](<https://devfeed.tech/tags/net.md>), [net-10](<https://devfeed.tech/tags/net-10.md>), [net-11](<https://devfeed.tech/tags/net-11.md>), [net-core](<https://devfeed.tech/tags/net-core.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [nuget](<https://devfeed.tech/tags/nuget.md>), [nuget-package](<https://devfeed.tech/tags/nuget-package.md>)

### AI overview

CBOR offers a self-describing binary alternative to JSON, with native binary data, compact encodings for values such as small numbers, and support for indefinite-length collections that can help with streaming. Text payload sizes are roughly comparable to JSON, and actual savings depend on the data. The excerpt contrasts CBOR with Protobuf, which can be highly efficient but requires shared schemas, and MessagePack, which is similar but lacks CBOR's formal IETF standardization and streaming support as described here. In .NET, System.Formats.Cbor provides low-level CborWriter and CborReader APIs: callers write and read primitive values and manage structure themselves rather than automatically mapping objects. The examples cover encoding and decoding maps and arrays, selecting conformance modes such as canonical key ordering, and skipping unknown values for forward compatibility. The author suggests JSON remains suitable for most APIs and points to ASP.NET Core's use of CBOR for compact, application-specific cookie data.

### Source excerpt

In this post I introduce CBOR as a JSON alternative, and show how to use the System.Formats.Cbor NuGet package to read and write CBOR encoded data

## Patch Tuesday - October 2026

DevFeed: [Patch Tuesday - October 2026](<https://devfeed.tech/articles/patch-tuesday-october-2026-86546.md>)

Original publisher: [Read original article](<https://www.rapid7.com/blog/post/em-patch-tuesday-october-2026>)

Author: Adam Barnett

Published: 2026-10-13T21:40:27Z

Content type: news

Language: en

Sources: [Rapid7 Cybersecurity](<https://devfeed.tech/sources/rapid7-cybersecurity-blog.md>)

Topics: [known exploitable vulnerabilities](<https://devfeed.tech/topics/known-exploitable-vulnerabilities.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [assembly](<https://devfeed.tech/tags/assembly.md>), [bypass](<https://devfeed.tech/tags/bypass.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloud-services](<https://devfeed.tech/tags/cloud-services.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2026-108398](<https://devfeed.tech/tags/cve-2026-108398.md>), [cve-2026-96951](<https://devfeed.tech/tags/cve-2026-96951.md>), [cybersecurity-company](<https://devfeed.tech/tags/cybersecurity-company.md>), [defender](<https://devfeed.tech/tags/defender.md>), [disclosure](<https://devfeed.tech/tags/disclosure.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [explorer](<https://devfeed.tech/tags/explorer.md>), [exposure-assessment-platform](<https://devfeed.tech/tags/exposure-assessment-platform.md>), [exposure-management](<https://devfeed.tech/tags/exposure-management.md>), [feature](<https://devfeed.tech/tags/feature.md>), [managed-detection-and-response](<https://devfeed.tech/tags/managed-detection-and-response.md>), [managed-security-solutions](<https://devfeed.tech/tags/managed-security-solutions.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [october](<https://devfeed.tech/tags/october.md>), [october-2026](<https://devfeed.tech/tags/october-2026.md>), [patch](<https://devfeed.tech/tags/patch.md>), [patch-tuesday](<https://devfeed.tech/tags/patch-tuesday.md>), [patch-tuesday-october-2026](<https://devfeed.tech/tags/patch-tuesday-october-2026.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

Microsoft's October 2026 Patch Tuesday publishes 1,413 product vulnerabilities, including 1,102 in Windows; the excerpt says Microsoft is aware of one exploited-in-the-wild flaw and public disclosure of two others. CVE-2026-96951 is an exploited Windows Shell security feature bypass that can suppress the Mark of the Web warning. Exploitation requires a user to open a specially crafted malicious file or visit an attacker-controlled site. Windows Server 2012 receives no patch, while Server 2012 R2 does; Outlook.com was patched weeks earlier. The excerpt also describes publicly disclosed .NET Framework flaw CVE-2026-108398, which requires an attacker to already have a foothold and register a malicious .NET assembly for loading by a protected process. The excerpt ends before describing the bypass further.

### Source excerpt

Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month's record-setting Patch Tuesday will love the October 2026 edition, because it's much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well as public disclosure for two others. Windows Shell: zero-day security feature bypass The Windows Shell is Microsoft's term for the GUI interaction logic for the entire OS provided by explorer.exe and associated libraries and APIs, and for the second time this year, the Windows Shell is the site of an exploited-in-the-wild zero-day vulnerability. Today's specimen is CVE-2026-96951. Once again, the immediate prize for an attacker is a Mark of the Web (MOTW) bypass. What this means is that Windows won't provide the user with a dialog explaining that Windows protected their PC, because in this case, it didn't. Exploitation requires that a user opens a specially crafted malicious file or visits an attacker-controlled site, so the evergreen advice about being careful what you click remains valid. Fans of vintage operating systems should note that Windows Server 2012 doesn't receive a patch, although Server 2012 R2 does. The advisory acknowledges reporters from multiple organizations, although none from within Microsoft. The vulnerability also affected Microsoft's Outlook.com cloud services, although Outlook.com was patched in a build dated several weeks ago. .NET Framework: zero-day security feature bypass Microsoft is aware of some level of public disclosure of CVE-2026-108398, a .NET Framework security feature bypass. Exploitation requires an attacker with an existing foothold to register a malicious .NET assembly for loading by a protected process, bypassing Windows Defender Appli

## .NET and .NET Framework October 2026 servicing releases updates

DevFeed: [.NET and .NET Framework October 2026 servicing releases updates](<https://devfeed.tech/articles/net-and-net-framework-october-2026-servicing-releases-updates-86380.md>)

Original publisher: [Read original article](<https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-october-2026-servicing-updates/>)

Author: Rahul Bhandari (MSFT), Tara Overfield

Published: 2026-10-12T20:00:00Z

Content type: release

Language: en

Sources: [.NET Blog](<https://devfeed.tech/sources/net-blog.md>)

Topics: [releases](<https://devfeed.tech/topics/releases.md>), [.NET](<https://devfeed.tech/topics/net.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [maintenance-updates](<https://devfeed.tech/tags/maintenance-updates.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [october](<https://devfeed.tech/tags/october.md>), [releases](<https://devfeed.tech/tags/releases.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This post recaps October 2026 servicing updates for .NET and .NET Framework, including security and non-security fixes. It points readers to version-specific CVE lists and release notes.

### Source excerpt

A recap of the latest servicing updates for .NET and .NET Framework for October 2026. The post .NET and .NET Framework October 2026 servicing releases updates appeared first on .NET Blog.

## Generate unit tests for your modernized code with AWS Transform for .NET

DevFeed: [Generate unit tests for your modernized code with AWS Transform for .NET](<https://devfeed.tech/articles/generate-unit-tests-for-your-modernized-code-with-aws-transform-for-net-65230.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/dotnet/generate-unit-tests-for-your-modernized-code-with-aws-transform-for-net/>)

Author: Pradeep Patel

Published: 2026-10-05T20:03:28Z

Content type: tutorial

Language: en

Sources: [.NET on AWS Blog](<https://devfeed.tech/sources/net-on-aws-blog.md>)

Topics: [mutation-testing](<https://devfeed.tech/topics/mutation-testing.md>), [AWS Transform](<https://devfeed.tech/topics/aws-transform.md>), [.NET](<https://devfeed.tech/topics/net.md>), [Unit testing](<https://devfeed.tech/topics/unit-testing.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [ai](<https://devfeed.tech/tags/ai.md>), [automated](<https://devfeed.tech/tags/automated.md>), [automatic](<https://devfeed.tech/tags/automatic.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [aws-iam-identity-center](<https://devfeed.tech/tags/aws-iam-identity-center.md>), [aws-transform](<https://devfeed.tech/tags/aws-transform.md>), [net](<https://devfeed.tech/tags/net.md>), [net-10](<https://devfeed.tech/tags/net-10.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [tests](<https://devfeed.tech/tags/tests.md>), [unit-tests](<https://devfeed.tech/tags/unit-tests.md>)

### AI overview

AWS Transform for .NET can generate unit tests for code during or after modernization of .NET Framework applications. The tutorial explains how the agent assesses testability, plans coverage for testable classes, and generates tests in Visual Studio. Developers can opt in at the start of a transformation or after reviewing the modernized code.

### Source excerpt

When you modernize a .NET Framework application to modern .NET, you end up with a transformed, buildable codebase -- but the question that immediately follows is always the same: how do I safely keep changing it from here? Once the code is modernized, your team keeps evolving it -- fixing bugs, adding features, upgrading dependencies [...]

## Modernize .NET applications from the command line with ATX CLI

DevFeed: [Modernize .NET applications from the command line with ATX CLI](<https://devfeed.tech/articles/modernize-net-applications-from-the-command-line-with-atx-cli-63192.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/dotnet/modernize-net-applications-from-the-command-line-with-atx-cli/>)

Author: David Pallmann

Published: 2026-10-01T16:32:05Z

Content type: tutorial

Language: en

Sources: [.NET on AWS Blog](<https://devfeed.tech/sources/net-on-aws-blog.md>)

Topics: [Command-line interface](<https://devfeed.tech/topics/cli.md>), [.NET](<https://devfeed.tech/topics/net.md>), [ASP.NET Core](<https://devfeed.tech/topics/asp-net-core.md>), [AI Shell](<https://devfeed.tech/topics/ai-shell.md>)

Tags: [2](<https://devfeed.tech/tags/2.md>), [3](<https://devfeed.tech/tags/3.md>), [ai](<https://devfeed.tech/tags/ai.md>), [app](<https://devfeed.tech/tags/app.md>), [asp-net-core](<https://devfeed.tech/tags/asp-net-core.md>), [aws-cli](<https://devfeed.tech/tags/aws-cli.md>), [aws-transform](<https://devfeed.tech/tags/aws-transform.md>), [blazor](<https://devfeed.tech/tags/blazor.md>), [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [cli](<https://devfeed.tech/tags/cli.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [net](<https://devfeed.tech/tags/net.md>), [net-10](<https://devfeed.tech/tags/net-10.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>), [visual-studio](<https://devfeed.tech/tags/visual-studio.md>)

### AI overview

The article walks through using the AWS Transform CLI to modernize .NET applications. It demonstrates unattended and interactive workflows, including reviewing migration plans, setting checkpoints, applying changes, and validating the resulting applications. The AWS-managed transformation has a monthly quota of agent minutes and supports Windows, macOS, and Linux.

### Source excerpt

AWS Transform now offers CLI-based .NET modernization with an AWS-managed transformation, which is free of charge within limits. In this post, I'll walk you through modernizing .NET solutions from the command line using the ATX CLI. AWS Transform already offers multiple experiences, including Visual Studio IDE for developers and web console for IT professionals, so [...]

## The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint

DevFeed: [The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint](<https://devfeed.tech/articles/the-not-so-silent-miner-threat-actor-compiles-cryptominer-on-the-endpoint-59340.md>)

Original publisher: [Read original article](<https://www.huntress.com/blog/threat-actor-compiles-cryptominer>)

Author: Harlan Carvey; Lindsey O'Donnell-Welch

Published: 2026-09-24T13:00:00Z

Content type: article

Language: en

Sources: [Huntress Blog](<https://devfeed.tech/sources/huntress-blog.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Endpoint Security & XDR](<https://devfeed.tech/topics/endpoint-security-xdr.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Monero](<https://devfeed.tech/topics/monero.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [actor](<https://devfeed.tech/tags/actor.md>), [anydesk](<https://devfeed.tech/tags/anydesk.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [cve](<https://devfeed.tech/tags/cve.md>), [deploy](<https://devfeed.tech/tags/deploy.md>), [edr](<https://devfeed.tech/tags/edr.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [incident](<https://devfeed.tech/tags/incident.md>), [incident-report](<https://devfeed.tech/tags/incident-report.md>), [initial-access](<https://devfeed.tech/tags/initial-access.md>), [installation](<https://devfeed.tech/tags/installation.md>), [it](<https://devfeed.tech/tags/it.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [microsoft-defender](<https://devfeed.tech/tags/microsoft-defender.md>), [miner](<https://devfeed.tech/tags/miner.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [powershell](<https://devfeed.tech/tags/powershell.md>), [processes](<https://devfeed.tech/tags/processes.md>)

### AI overview

Huntress reports an incident in which attackers exploited a Samsung MagicINFO vulnerability, installed AnyDesk, and compiled a Monero cryptominer directly on a victim endpoint. The compilation activity produced a noticeable spike in EDR telemetry.

### Source excerpt

Threat actors exploited Samsung MagicINFO to install AnyDesk, disable Defender, and compile a Monero miner directly on a victim endpoint. Learn the detection signals.

## Modernize .NET repos at scale with the AWS Transform web experience

DevFeed: [Modernize .NET repos at scale with the AWS Transform web experience](<https://devfeed.tech/articles/modernize-net-repos-at-scale-with-the-aws-transform-web-experience-49978.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/dotnet/modernize-net-repos-at-scale-with-the-aws-transform-web-experience/>)

Author: David Pallmann

Published: 2026-09-18T10:04:18Z

Content type: tutorial

Language: en

Sources: [.NET on AWS Blog](<https://devfeed.tech/sources/net-on-aws-blog.md>)

Topics: [AWS Transform](<https://devfeed.tech/topics/aws-transform.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>), [.NET](<https://devfeed.tech/topics/net.md>), [Repository](<https://devfeed.tech/topics/repository.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Website](<https://devfeed.tech/topics/website.md>)

Tags: [aws-transform](<https://devfeed.tech/tags/aws-transform.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [linux](<https://devfeed.tech/tags/linux.md>), [modernization](<https://devfeed.tech/tags/modernization.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [repositories](<https://devfeed.tech/tags/repositories.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>)

### AI overview

A walkthrough of AWS Transform's web experience for modernizing multiple .NET Framework repositories at scale. It describes an IT-led workflow that converts Windows .NET Framework applications to modern .NET on Linux, then hands the transformed repositories to developers for review and validation.

### Source excerpt

If you have multiple .NET Framework solutions to modernize, you may be wondering how to do that efficiently - especially if you have dozens, hundreds, or thousands of repositories. You can accelerate .NET code modernization with AWS Transform, converting old Windows .NET Framework applications to modern .NET on Linux. In a prior post, I covered [...]

## Accelerating Legacy .NET Modernization at Bio-Rad with AWS Transform and Kiro

DevFeed: [Accelerating Legacy .NET Modernization at Bio-Rad with AWS Transform and Kiro](<https://devfeed.tech/articles/accelerating-legacy-net-modernization-at-bio-rad-with-aws-transform-and-kiro-49966.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/dotnet/accelerating-legacy-net-modernization-at-bio-rad-with-aws-transform-and-kiro/>)

Author: Jasmina Desai

Published: 2026-09-17T10:26:07Z

Content type: article

Language: en

Sources: [.NET on AWS Blog](<https://devfeed.tech/sources/net-on-aws-blog.md>)

Topics: [AWS Transform](<https://devfeed.tech/topics/aws-transform.md>), [.NET](<https://devfeed.tech/topics/net.md>), [legacy systems](<https://devfeed.tech/topics/legacy-systems.md>), [Kiro](<https://devfeed.tech/topics/kiro.md>), [migration](<https://devfeed.tech/topics/migration.md>), [Code](<https://devfeed.tech/topics/code.md>), [ASP.NET](<https://devfeed.tech/topics/aspnet.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [Risk](<https://devfeed.tech/topics/risk.md>), [Security](<https://devfeed.tech/topics/security.md>), [software-architecture](<https://devfeed.tech/topics/software-architecture.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [aws-transform](<https://devfeed.tech/tags/aws-transform.md>), [code](<https://devfeed.tech/tags/code.md>), [conversion](<https://devfeed.tech/tags/conversion.md>), [database](<https://devfeed.tech/tags/database.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [kiro](<https://devfeed.tech/tags/kiro.md>), [legacy](<https://devfeed.tech/tags/legacy.md>), [legacy-application](<https://devfeed.tech/tags/legacy-application.md>), [migration](<https://devfeed.tech/tags/migration.md>), [modernization](<https://devfeed.tech/tags/modernization.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [security](<https://devfeed.tech/tags/security.md>), [stored-procedures](<https://devfeed.tech/tags/stored-procedures.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>)

### AI overview

A case study of Bio-Rad Laboratories' modernization of customer-facing legacy .NET and Classic ASP applications using AWS Transform and Kiro. The document reports that about 70% of source code was automated, reducing the stated delivery timeline from 9-10 months to 2-3 months per application while preserving the database schema and stored procedures.

### Source excerpt

Bio-Rad Laboratories, a global leader in life science research and clinical diagnostics, faced the challenge of modernizing their customer-facing applications built on unsupported .NET frameworks. Traditional approach to modernization of their legacy .NET and Classic ASP applications would have delayed making their applications secure, scalable and maintainable by more than a year. Legacy application modernization [...]

## Modernize your legacy WCF services: Automated migration to ASP.NET Core Web API using AWS Transform custom

DevFeed: [Modernize your legacy WCF services: Automated migration to ASP.NET Core Web API using AWS Transform custom](<https://devfeed.tech/articles/modernize-your-legacy-wcf-services-automated-migration-to-asp-net-core-web-api-using-aws-transform-custom-49981.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/dotnet/modernize-your-legacy-wcf-services-automated-migration-to-asp-net-core-web-api-using-aws-transform-custom/>)

Author: Vishwanath Uppala

Published: 2026-09-09T20:40:56Z

Content type: tutorial

Language: en

Sources: [.NET on AWS Blog](<https://devfeed.tech/sources/net-on-aws-blog.md>)

Topics: [ASP.NET Core](<https://devfeed.tech/topics/asp-net-core.md>), [AWS Transform](<https://devfeed.tech/topics/aws-transform.md>), [migration](<https://devfeed.tech/topics/migration.md>), [legacy systems](<https://devfeed.tech/topics/legacy-systems.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>), [API](<https://devfeed.tech/topics/api.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>)

Tags: [agentic-ai](<https://devfeed.tech/tags/agentic-ai.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [api](<https://devfeed.tech/tags/api.md>), [asp-net-core](<https://devfeed.tech/tags/asp-net-core.md>), [aws-transform](<https://devfeed.tech/tags/aws-transform.md>), [legacy](<https://devfeed.tech/tags/legacy.md>), [migration](<https://devfeed.tech/tags/migration.md>), [net](<https://devfeed.tech/tags/net.md>), [net-10](<https://devfeed.tech/tags/net-10.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

A walkthrough of using AWS Transform custom to automate the migration of a legacy .NET Framework WCF SOAP service to an ASP.NET Core Web API on .NET 10. It covers defining and running the transformation with PowerShell and checking architectural changes such as routing, DTOs, Entity Framework Core patterns, and HTTP semantics.

### Source excerpt

Enterprises who need to migrate business-critical Windows Communication Foundation (WCF) services to ASP.NET Core Web API sometimes struggle with the scope of the change. These services still run on .NET Framework, the pool of engineers fluent in service contracts keep shrinking, and modern .NET does not support WCF. The community CoreWCF project (a .NET Foundation [...]

## .NET and .NET Framework September 2026 servicing releases updates

DevFeed: [.NET and .NET Framework September 2026 servicing releases updates](<https://devfeed.tech/articles/net-and-net-framework-september-2026-servicing-releases-updates-2946.md>)

Original publisher: [Read original article](<https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-september-2026-servicing-updates/>)

Author: Rahul Bhandari (MSFT), Tara Overfield

Published: 2026-09-08T20:00:00Z

Content type: release

Language: en

Sources: [.NET Blog](<https://devfeed.tech/sources/net-blog.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>), [releases](<https://devfeed.tech/topics/releases.md>)

Tags: [asp-net-core](<https://devfeed.tech/tags/asp-net-core.md>), [maintenance-updates](<https://devfeed.tech/tags/maintenance-updates.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [release-notes](<https://devfeed.tech/tags/release-notes.md>), [releases](<https://devfeed.tech/tags/releases.md>), [security](<https://devfeed.tech/tags/security.md>), [september-2026](<https://devfeed.tech/tags/september-2026.md>), [updates](<https://devfeed.tech/tags/updates.md>)

### AI overview

September 2026 servicing releases for .NET and .NET Framework provide security and non-security fixes. The post lists updated ASP.NET Core, Entity Framework Core, and Runtime versions across .NET 10, 9, and 8 release lines.

### Source excerpt

A recap of the latest servicing updates for .NET and .NET Framework for September 2026. The post .NET and .NET Framework September 2026 servicing releases updates appeared first on .NET Blog.

## Microsoft.Data.SqlClient Adds Built-In Retry Logic for Transient SQL Server Failures

DevFeed: [Microsoft.Data.SqlClient Adds Built-In Retry Logic for Transient SQL Server Failures](<https://devfeed.tech/articles/try-the-new-sqlclient-and-retry-connections-natively-50576.md>)

Original publisher: [Read original article](<https://devblogs.microsoft.com/azure-sql/sqlclient-retry/>)

Author: Jerry Nixon

Published: 2026-08-29T05:47:40Z

Content type: tutorial

Language: en

Sources: [Azure SQL Dev Corner](<https://devfeed.tech/sources/azure-sql-dev-corner.md>)

Topics: [retry](<https://devfeed.tech/topics/retry.md>), [.NET](<https://devfeed.tech/topics/net.md>), [sql-server](<https://devfeed.tech/topics/sql-server.md>), [Resilience](<https://devfeed.tech/topics/resilience.md>), [software-development](<https://devfeed.tech/topics/software-development.md>)

Tags: [azure-sql](<https://devfeed.tech/tags/azure-sql.md>), [drivers](<https://devfeed.tech/tags/drivers.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [resilience](<https://devfeed.tech/tags/resilience.md>), [retry](<https://devfeed.tech/tags/retry.md>), [sql-server](<https://devfeed.tech/tags/sql-server.md>), [sql-server-2025](<https://devfeed.tech/tags/sql-server-2025.md>), [sqlclient](<https://devfeed.tech/tags/sqlclient.md>)

### AI overview

Microsoft.Data.SqlClient provides configurable retry logic for SqlConnection and SqlCommand, helping .NET applications handle transient SQL Server failures without third-party libraries such as Polly. The article also explains migration from System.Data.SqlClient.

### Source excerpt

Microsoft.Data.SqlClient includes configurable retry logic for SqlConnection and SqlCommand, giving .NET applications built-in resilience for transient SQL Server failures without requiring Polly. The post Try the new SqlClient and Retry connections natively appeared first on Azure SQL Dev Corner.

## Finding the total number of processors on a machine with .NET

DevFeed: [Finding the total number of processors on a machine with .NET](<https://devfeed.tech/articles/finding-the-total-number-of-processors-on-a-machine-with-net-51480.md>)

Original publisher: [Read original article](<https://andrewlock.net/finding-the-total-number-of-processors-on-a-machine-with-dotnet/>)

Author: Andrew Lock

Published: 2026-08-25T10:00:00Z

Content type: tutorial

Language: en

Sources: [Andrew Lock | .NET Escapades](<https://devfeed.tech/sources/andrew-lock-net-escapades.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>), [cpu](<https://devfeed.tech/topics/cpu.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>)

Tags: [2](<https://devfeed.tech/tags/2.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [linux](<https://devfeed.tech/tags/linux.md>), [macos](<https://devfeed.tech/tags/macos.md>), [net](<https://devfeed.tech/tags/net.md>), [net-core](<https://devfeed.tech/tags/net-core.md>), [net-core-observability](<https://devfeed.tech/tags/net-core-observability.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [observability](<https://devfeed.tech/tags/observability.md>)

### AI overview

This post explains how to retrieve the total number of logical processors on a host machine in .NET, rather than only the processors available to the current process. It compares behavior across .NET Framework and modern .NET, then describes using native APIs on Windows and macOS and parsing files on Linux.

### Source excerpt

In this post I show how to find the total number of logical CPUs on a host (not just those available to a process); something that isn't exposed in modern .NET

## Today I will... Modernize a .NET application

DevFeed: [Today I will... Modernize a .NET application](<https://devfeed.tech/articles/today-i-will-modernize-a-net-application-4007.md>)

Original publisher: [Read original article](<https://devblogs.microsoft.com/visualstudio/today-i-will-modernize-a-net-application/>)

Author: Matt Soucoup, Pablo Lopes

Published: 2026-08-21T17:00:45Z

Content type: tutorial

Language: en

Sources: [Visual Studio](<https://devfeed.tech/sources/visual-studio-blog.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>)

Tags: [copilot](<https://devfeed.tech/tags/copilot.md>), [github-copilot](<https://devfeed.tech/tags/github-copilot.md>), [modernization](<https://devfeed.tech/tags/modernization.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [tooling](<https://devfeed.tech/tags/tooling.md>), [visual-studio](<https://devfeed.tech/tags/visual-studio.md>)

### AI overview

A tutorial on using GitHub Copilot modernization tooling in Visual Studio to upgrade a .NET Framework application to .NET 10. It describes Guided mode, which pauses at assessment, planning, and execution checkpoints for review and source-control records.

### Source excerpt

Today I will modernize a .NET Framework application to .NET 10 using the GitHub Copilot modernization tooling built-in to Visual Studio. The tooling helps us upgrade applications running on legacy versions of .NET and also migrate them to Azure. Today we're going to focus on the upgrade portion. And, the tooling will do [...] The post Today I will... Modernize a .NET application appeared first on Visual Studio Blog.

## Centralize cross-account Amazon ECS telemetry with an ADOT gateway

DevFeed: [Centralize cross-account Amazon ECS telemetry with an ADOT gateway](<https://devfeed.tech/articles/centralize-cross-account-amazon-ecs-telemetry-with-an-adot-gateway-4626.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/containers/centralize-cross-account-amazon-ecs-telemetry-with-an-adot-gateway/>)

Author: Rahul Kumar

Published: 2026-08-06T16:13:46Z

Content type: tutorial

Language: en

Sources: [Containers](<https://devfeed.tech/sources/containers.md>)

Topics: [Amazon Elastic Container Service](<https://devfeed.tech/topics/amazon-elastic-container-service.md>), [telemetry](<https://devfeed.tech/topics/telemetry.md>), [OpenTelemetry](<https://devfeed.tech/topics/opentelemetry.md>), [observability](<https://devfeed.tech/topics/observability.md>), [Security Information and Event Management (SIEM)](<https://devfeed.tech/topics/siem-security.md>), [Amazon CloudWatch](<https://devfeed.tech/topics/amazon-cloudwatch.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>), [tracing](<https://devfeed.tech/topics/tracing.md>), [log management](<https://devfeed.tech/topics/log-management.md>), [Amazon Elastic Kubernetes Service](<https://devfeed.tech/topics/amazon-elastic-kubernetes-service.md>)

Tags: [amazon-cloudwatch](<https://devfeed.tech/tags/amazon-cloudwatch.md>), [amazon-eks](<https://devfeed.tech/tags/amazon-eks.md>), [amazon-elastic-container-service](<https://devfeed.tech/tags/amazon-elastic-container-service.md>), [amazon-elastic-kubernetes-service](<https://devfeed.tech/tags/amazon-elastic-kubernetes-service.md>), [aws](<https://devfeed.tech/tags/aws.md>), [intermediate-200](<https://devfeed.tech/tags/intermediate-200.md>), [logs](<https://devfeed.tech/tags/logs.md>), [metrics](<https://devfeed.tech/tags/metrics.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [observability](<https://devfeed.tech/tags/observability.md>), [opentelemetry](<https://devfeed.tech/tags/opentelemetry.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>), [telemetry](<https://devfeed.tech/tags/telemetry.md>), [traces](<https://devfeed.tech/tags/traces.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

This tutorial presents a centralized AWS Distro for OpenTelemetry gateway for collecting telemetry from Amazon ECS workloads across multiple AWS accounts. It replaces per-task sidecars, supports Windows .NET Framework tasks, receives OTLP over private connectivity, and exports traces to AWS X-Ray plus metrics and logs to Amazon CloudWatch.

### Source excerpt

Running an OpenTelemetry collector as a sidecar in every Amazon ECS task does not scale across a multi-account estate, and it cannot run at all on Windows. Learn how to replace per-task sidecars with a single centralized ADOT gateway that ingests OTLP from workloads across accounts and exports traces to AWS X-Ray and metrics and logs to Amazon CloudWatch.

## Modernize your legacy VB.NET applications: Automated migration to C# using AWS Transform custom

DevFeed: [Modernize your legacy VB.NET applications: Automated migration to C# using AWS Transform custom](<https://devfeed.tech/articles/modernize-your-legacy-vb-net-applications-automated-migration-to-c-using-aws-transform-custom-49980.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/dotnet/modernize-your-legacy-vb-net-applications-automated-migration-to-c-using-aws-transform-custom/>)

Author: George Liu

Published: 2026-07-28T13:34:40Z

Content type: tutorial

Language: en

Sources: [.NET on AWS Blog](<https://devfeed.tech/sources/net-on-aws-blog.md>)

Topics: [AWS Transform](<https://devfeed.tech/topics/aws-transform.md>), [migration](<https://devfeed.tech/topics/migration.md>), [C#](<https://devfeed.tech/topics/csharp.md>), [legacy systems](<https://devfeed.tech/topics/legacy-systems.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>), [cross-platform](<https://devfeed.tech/topics/cross-platform.md>)

Tags: [aws-transform](<https://devfeed.tech/tags/aws-transform.md>), [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [legacy](<https://devfeed.tech/tags/legacy.md>), [migration](<https://devfeed.tech/tags/migration.md>), [modernization](<https://devfeed.tech/tags/modernization.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [tooling](<https://devfeed.tech/tags/tooling.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>)

### AI overview

This tutorial explains how to use AWS Transform custom to automate the migration of legacy VB.NET applications built on .NET Framework to C#. It describes defining a custom transformation, executing it against a sample console application, and verifying the results, with a subsequent path toward cross-platform .NET modernization.

### Source excerpt

Many enterprises still maintain legacy Visual Basic .NET (VB.NET) applications built on .NET Framework. While these applications continue to serve business needs, organizations face growing challenges: a shrinking VB.NET developer talent pool, limited modern tooling support, and a difficult path to cross-platform .NET modernization. Migrating from VB.NET to C# addresses these challenges by opening access [...]

## .NET's long term support is not long term enough, dev complains

DevFeed: [.NET's long term support is not long term enough, dev complains](<https://devfeed.tech/articles/net-s-long-term-support-is-not-long-term-enough-dev-complains-47913.md>)

Original publisher: [Read original article](<https://www.devclass.com/devops/2026/06/30/nets-long-term-support-is-not-long-term-enough-dev-complains/5263913>)

Author: Tim Anderson

Published: 2026-06-30T19:16:00Z

Content type: news

Language: en

Sources: [DevClass.com](<https://devfeed.tech/sources/devclass-com.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>), [version](<https://devfeed.tech/topics/version.md>), [legacy systems](<https://devfeed.tech/topics/legacy-systems.md>), [maintenance](<https://devfeed.tech/topics/maintenance.md>), [Java](<https://devfeed.tech/topics/java.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [adoption](<https://devfeed.tech/tags/adoption.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [end-of-life](<https://devfeed.tech/tags/end-of-life.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [maintenance](<https://devfeed.tech/tags/maintenance.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [runtime](<https://devfeed.tech/tags/runtime.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>)

### AI overview

The article reports renewed developer criticism that Microsoft's three-year .NET LTS support window is too short for enterprise upgrade and adoption cycles. It describes concerns about end-of-life versions, ecosystem support for the older .NET Framework, and Microsoft's decision to retain free support periods without longer or paid options.

### Source excerpt

Microsoft's support policy for its .NET runtime and development platform is too short for enterprise ...

## Modernize .NET with the AWS Transform conversational AI assistant for Visual Studio

DevFeed: [Modernize .NET with the AWS Transform conversational AI assistant for Visual Studio](<https://devfeed.tech/articles/modernize-net-with-the-aws-transform-conversational-ai-assistant-for-visual-studio-49976.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/dotnet/introducing-the-aws-transform-conversational-ai-assistant-for-visual-studio/>)

Author: David Pallmann

Published: 2026-06-14T23:21:32Z

Content type: tutorial

Language: en

Sources: [.NET on AWS Blog](<https://devfeed.tech/sources/net-on-aws-blog.md>)

Topics: [AWS Transform](<https://devfeed.tech/topics/aws-transform.md>), [.NET](<https://devfeed.tech/topics/net.md>), [Visual Studio](<https://devfeed.tech/topics/visual-studio.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>), [cross-platform](<https://devfeed.tech/topics/cross-platform.md>), [ide](<https://devfeed.tech/topics/ide.md>), [software-development](<https://devfeed.tech/topics/software-development.md>), [C#](<https://devfeed.tech/topics/csharp.md>)

Tags: [ai-assistant](<https://devfeed.tech/tags/ai-assistant.md>), [aws-transform](<https://devfeed.tech/tags/aws-transform.md>), [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [development](<https://devfeed.tech/tags/development.md>), [ide](<https://devfeed.tech/tags/ide.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>), [visual-studio](<https://devfeed.tech/tags/visual-studio.md>)

### AI overview

This tutorial demonstrates AWS Transform's conversational AI assistant in Visual Studio for modernizing a complex .NET Framework application. It walks through assessment, transformation planning, iterative project conversion, local building, and final validation while moving a Windows application to cross-platform .NET 10 for Linux.

### Source excerpt

Since launching the AWS Transform service in May 2025, we've heard from .NET customers who want a conversational agent they can work alongside of throughout the transformation process. In this post, I'll give you a tour of the new Visual Studio IDE experience featuring a conversational AI assistant as I walk you through a complex [...]

## Removing byte\[\] allocations in .NET Framework using ReadOnlySpan

DevFeed: [Removing byte\[\] allocations in .NET Framework using ReadOnlySpan](<https://devfeed.tech/articles/removing-byte-allocations-in-net-framework-using-readonlyspan-51484.md>)

Original publisher: [Read original article](<https://andrewlock.net/removingbyte-array-allocations-in-dotnet-framework-using-readonlyspan-t/>)

Author: Andrew Lock

Published: 2026-04-21T10:00:00Z

Content type: article

Language: en

Sources: [Andrew Lock | .NET Escapades](<https://devfeed.tech/sources/andrew-lock-net-escapades.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>), [.NET Framework](<https://devfeed.tech/topics/net-framework.md>), [C#](<https://devfeed.tech/topics/csharp.md>), [Code](<https://devfeed.tech/topics/code.md>), [Compiler](<https://devfeed.tech/topics/compiler.md>)

Tags: [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [c-sharp-performance](<https://devfeed.tech/tags/c-sharp-performance.md>), [code](<https://devfeed.tech/tags/code.md>), [compiler](<https://devfeed.tech/tags/compiler.md>), [memory](<https://devfeed.tech/tags/memory.md>), [net](<https://devfeed.tech/tags/net.md>), [net-framework](<https://devfeed.tech/tags/net-framework.md>), [optimizations](<https://devfeed.tech/tags/optimizations.md>), [performance](<https://devfeed.tech/tags/performance.md>)

### AI overview

This post explains how to reduce byte-array and other memory allocations in C# applications targeting .NET, including .NET Framework. It covers using Span and ReadOnlySpan, compiler-generated optimizations, changes to the generated IL, and relevant caveats.

### Source excerpt

In this post I describe how to remove static byte[] allocations, even on .NET Framework, by using Span, look at the associated IL, and discuss the risks

[Next page](<https://devfeed.tech/tags/net-framework.md?cursor=WyIyMDI2LTA0LTIxVDEwOjAwOjAwKzAwOjAwIiwgIjk5YTNlYzk0LTNhNTEtNGFhMS1iYjJlLTg2ZTg0NzU1OGIxOCJd>)