John Downey presented information on the recent vulnerability in ASP.NET.
File:Padding_Oracle_Vulnerabilities.pdf