Web apps built on ASP.Net may face a new wave of crypto attacks, putting sensitive data as -- well as Microsoft's already tarnished reputation for insecurity -- at risk.