By clicking "Accept", you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

PreferencesRejectAccept
Manage Consent Preferences by Category
Essentials
Always active

Necessary for the site to function. Always On.

Used for targeted advertising.

Remembers your preferences and provides enhanced features.

Measures usage and improves your experience.

Reject AllAccept All
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Pink arrow right
Back to all posts
Hayden Barnes
Hayden Barnes
Senior Open Source Partner Manager
@unixterminal
. . .
Security
Jan 30, 2026
HeroDevs Joins The .NET Foundation to Secure and Grow the Open Source Ecosystem
Corporate sponsorship expands HeroDevs’ commitment to .NET security, sustainability, and long-term open source support through funding, engineering, and coordinated vulnerability response.
Hayden Barnes
Hayden Barnes
Security
Jan 5, 2026
HeroDevs Joins .NET Security Group: Securing the Future of the .NET Ecosystem
How early CVE access and coordinated patching strengthen security for the entire .NET ecosystem
Hayden Barnes
Hayden Barnes
Security
Nov 11, 2025
A Practical Decisionmakers Guide To Responding to CVE-2025-55315
What CTOs, CISOs, and DevSecOps Pros Need to Know About CVE-2025-55315
Hayden Barnes
Hayden Barnes
Security
Nov 5, 2025
FAQ about CVE-2025-55315, the 9.9-rated CVE in ASP.NET Core
Everything you need to know about CVE-2025-55315 — the 9.9-rated HTTP request smuggling and security bypass vulnerability impacting ASP.NET Core and Kestrel.
Hayden Barnes
Hayden Barnes
Security
Oct 22, 2025
CVE-2025-41254: Spring WebSocket CSRF Bypass Vulnerability Explained
Attackers can send unauthorized messages without establishing a proper WebSocket session — exposing Spring WebSocket applications to CSRF-style attacks.
Hayden Barnes
Hayden Barnes
Security
Oct 17, 2025
Critical ASP.NET Vulnerability CVE-2025-55315 Reported, Upgrade Now
A newly disclosed ASP.NET Core flaw (CVE-2025-55315) scored a critical 9.9 CVSS, enabling HTTP Request Smuggling attacks. Here’s why it’s a red alert and what to do now.
Hayden Barnes
Hayden Barnes
Thought Leadership
Oct 8, 2025
The Danger of Legacy Containers in Open Source
When Bitnami’s container catalog went dark, thousands of open-source deployments were left running unpatched software. Here’s what that means—and how to stay secure.
Hayden Barnes
Hayden Barnes