Here is some links that shows information about the security for ASP.NET.
(3) Update on ASP.NET Vulnerability
(4) ASP.NET Security Update Shipping Tuesday, Sept 28th
(5) ASP.NET Security Update Now Available
(6) ASP.NET Security Fix Now on Windows Update
Some more links about security issue in ASP.NET
Some links about how to Encrypt/Decrypt Configuration Section.