techhub.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A hub primarily for passionate technologists, but everyone is welcome

Administered by:

Server stats:

5.3K
active users

#msbuild

2 posts2 participants0 posts today

The countdown to Microsoft Build 2025 is here! Join us from May 19-22, in Seattle or online, for an exciting lineup of .NET and C# content.

With over 75 sessions covering everything from AI integration to app modernization, there's something for all .NET developers! Connect with the community, meet the experts, and get hands-on experience at our labs.

Don't miss out! #MSBuild #dotNET #DeveloperCommunity

Exploitation of CLFS zero-day leads to ransomware activity

A zero-day elevation of privilege vulnerability in Windows Common Log File System (CLFS) has been exploited against targets in IT, real estate, finance, software, and retail sectors across multiple countries. The exploit, deployed by PipeMagic malware and attributed to Storm-2460, enables privilege escalation and ransomware deployment. The vulnerability, CVE-2025-29824, was patched on April 8, 2025. The attack involves downloading malicious MSBuild files, using PipeMagic, and exploiting CLFS to inject payloads into system processes. Post-exploitation activities include credential theft and ransomware deployment, with similarities to RansomEXX. Microsoft recommends immediate patching and provides mitigation strategies, detection methods, and hunting queries to counter this threat.

Pulse ID: 67f6b1c7251291d51de23a7a
Pulse Link: otx.alienvault.com/pulse/67f6b
Pulse Author: AlienVault
Created: 2025-04-09 17:43:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

Build System Refinement

We are currently in the process of refining the build system so that developers can build our projects more efficiently than before. The build scripts will be updated so that they reflect what we plan to do to them, such as being able to be run from any working directory for complex build procedures.

This will save time for both the developers and for those who plan to contribute to our projects. The update to the build scripts will be rolled out gradually as we evaluate choices to make sure that those scripts meet our quality requirements. The development branches of Nitrocid and Terminaux are the testing grounds to develop the updated build scripts.

The GitHub workflows will also be updated to more accurately verify our work by introducing dry running to all the scripts. This way, we’d be able to deploy the release more efficiently without having to create errata releases for just one minor build issue. For example, Nitrocid 0.1.2.1 had to be released after we’d discovered that the NuGet packages for 0.1.2.0 were missing due to a failing step related to the Discord webhook.

We’ll apply the appropriate changes based on the impact, and we’ll make sure that the developer experience of contributing to our projects will be much better. Much, much better than before.

Photo by ThisisEngineering on Unsplash

Is there a way for #CSharp #MSBuild projects to not target the full TargetFrameworks|Platforms matrix, but just a subset?
I.e. for TargetFramework=net8 I want x64 and arm64, for TargetFramework=net472 I want x64, but not arm64.
With
TargetFrameworks=net8.0;net472
Platforms=x64;arm64
This creates net8.0-x64;net8.0-arm64;net472-x64;net472-arm64
Which isn't what I want.

Performance tip for JetBrains Rider / ReSharper users:

Make sure your custom MSBuild targets only run during build time. Rider and ReSharper may otherwise execute them while loading the projects, which can have significant impact on the load times.

You can add the following condition to your target to ensure it's only run during a build.

Condition="'$(BuildingProject)' == 'true'"