.NET 8, 9, 10 and 11 get an out-of-band security update
On October 25, Microsoft published an update outside the normal calendar (out-of-band) for .NET. The new versions are 8.0.33, 9.0.22 and 10.0.14; anyone testing .NET 11 should move from RC2 to RC3.
The package fixes a buffer overflow in Brotli decompression (CVE-2026-111497), which lets an unauthenticated attacker read or corrupt process memory, and a permissions problem in the Linux tarballs (CVE-2026-114148). Two fixes from the October 13 patch also came back, because they had not fully closed the issue: the one for SocketAsyncEventArgs and the one for the Blazor WebAssembly debugger.
Exposure to Brotli is higher for anyone who decompresses requests in ASP.NET Core, uses automatic decompression in HttpClient, or uses the Brotli APIs in System.IO.Compression. Neither of these decompression features is enabled by default.
For .NET developers: update the runtime and restart the apps; self-contained apps and container images must be rebuilt and republished, and dotnet --list-runtimes helps you check each machine.
Source: .NET Blog (Microsoft)
Anthropic files its Nasdaq IPO request with the SEC
On October 26, Anthropic announced that it filed the S-1 form with the SEC, the US market regulator, for an initial public offering of Class A shares. The intention is to list on the Nasdaq Global Select Market under the ticker "ANT".
The number of shares and the price range have not been set yet, and the registration is not yet effective, so nothing can be bought or sold for now. Goldman Sachs and Morgan Stanley are listed as contacts for the prospectus.
For anyone building with Claude, nothing changes in the product right now. What changes is the level of scrutiny: a public company starts publishing results and risks regularly, which brings more visibility into the sustainability of the model provider.
For .NET developers: no technical change; the API, the SDKs (including the C# one) and the prices stay as they are.
Source: Anthropic
GPT-6.1 Terra arrives in GitHub Copilot, including Visual Studio
On October 26, GitHub announced general availability of GPT-6.1 Terra in Copilot. According to the changelog, it is OpenAI's newest model for everyday agent tasks and terminal work, at a lower cost than GPT-6.1 Sol.
It is available on the Pro, Pro+, Max, Business and Enterprise plans, in VS Code, Visual Studio, Copilot CLI, the cloud agent, the JetBrains IDEs, Xcode and Eclipse. Billing follows the provider's list price under the usage-based model, and the rollout is gradual.
GitHub says that, in early tests, the model solved more terminal and C# tasks than GPT-5.6 Terra. This is an internal number with no public benchmark attached, so it is worth testing on your own code.
For .NET developers: anyone using Copilot in Visual Studio gets one more model option for C#; on Business and Enterprise, the administrator controls access through the model policy.
Source: GitHub Changelog
Google Docs and Drive open and edit Markdown without converting it
On October 26, Google announced native support for .md files in Google Docs and Drive. The file opens in Docs with a ".md" badge and stays Markdown, without becoming a Google document.
In Drive, the preview shows the formatting, with tables and links, and you can switch to plain text. People and AI agents can edit the same file, with line comments and a version history that records both authors.
Because the file is not converted, it remains usable by development tools and by git repositories, according to the announcement. The post does not detail Workspace plans or the API.
For .NET developers: READMEs, ADRs and specs in Markdown can be reviewed by people who do not use git, without leaving the format the repository expects.
Source: Google for Developers Blog
My take
What really matters this weekend is the .NET patch. An exploitable buffer overflow without authentication, plus two fixes from October 13 that had not solved the problem, is the kind of thing that belongs in today's queue, not the next sprint. The detail that catches unprepared teams most is that updating the machine's runtime is not enough for self-contained apps or containers: you have to rebuild and republish the image.
Anthropic's IPO is the biggest headline, but for developers it is context, not a task. GPT-6.1 Terra in Copilot and Markdown in Google Docs point in the same direction I have been following: the model becomes a swappable part of the tool, and the text format agents read well, Markdown, also becomes the collaboration format between people. The rest of the period was back-office noise.
Also read
Need help with .NET backend and applied AI? See the service.