Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate privileges.
The vulnerability, tracked as CVE-2026-40372, carries a CVSS score of 9.1 out of 10.0. It’s rated Important in severity. An anonymous researcher has been credited with discovering and reporting the flaw.
“Improper verification of cryptographic

AMA Calls on Congress to Improve Safeguards for AI Mental Health Chatbots
The American Medical Association is urging Congress to add safeguards for AI mental health chatbots amid safety concerns, while noting their potential to expand access.


