Microsoft has revealed details of a major security flaw in ASP.NET, the technology on which DotNetNuke runs.  It affects all websites that run ASP.NET.  You can read about it here in Scott Guthrie's blog.

For DotNetNuke sites, Cathal Connolly leads the DotNetNuke security team.  As usual, he is on top of the issue, and this blog post tells you what you need to do to secure your DotNetNuke sites.


READ!

Thanks for letting us know Craig.

DotNetNuke 5.5.1 has a "fix" for the security flaw. 

Keep your eyes open, too, for a soon-to-be-released update to ASP.NET from Microsoft.