Security - Curated .NET Articles & Tutorials

Curated .NET news, articles, and tutorials about Security, drawn from .NET News Daily issues.

237 curated issues

Improving C# Memory Safety

We're in the process of significantly improving memory safety in C#. The unsafe keyword is being redesigned to inform callers that they have obligations that must be discharged to maintain safety, doc...

Featured in Issue #464 May 27, 2026

Issue also covered: ASP.NET Core, Azure, Blazor, C#, Design Patterns, .NET 10, .NET 9, .NET Framework

Read this issue →

Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM

As cloud workloads become more agentic and AI systems handle increasingly sensitive data, trust must be engineered directly into infrastructure. Azure Integrated HSM brings hardware‑enforced key prote...

Featured in Issue #455 May 13, 2026

Issue also covered: Azure, Clean Architecture, C#, .NET 10, .NET MAUI, Minimal APIs, OpenAI, Performance

Read this issue →

Microsoft SQL Security Across the MAESTRO Stack: Building Secure Agentic AI with Defense-in-Depth

Artificial Intelligence is evolving rapidly. What began as simple prompt-and-response systems is now transforming into fully autonomous, agentic AI architectures capable of reasoning, orchestrating to...

Featured in Issue #459 May 19, 2026

Issue also covered: ASP.NET Core, Azure, Cosmos DB, C#, .NET 10, EF Core, GitHub Copilot, OpenAI

Read this issue →

OWASP Top 10 for .NET Developers - Part 1: Preventing Broken Access Control

Broken Access Control is ranked as the #1 security risk in the OWASP Top 10 because improperly enforced authorization allows attackers to…

Featured in Issue #454 May 12, 2026

Issue also covered: ASP.NET Core, Authorization, Blazor, Clean Architecture, CQRS, C#, .NET 10, GitHub Copilot

Read this issue →

AWS Bedrock with .NET: Guardrails for Safe AI Applications

The Problem: An AI With No Boundaries

Featured in Issue #465 May 28, 2026

Issue also covered: ASP.NET Core, Authentication, Blazor, .NET Core, .NET Framework, GitHub Copilot, JWT, OpenAI

Read this issue →

Why not have changes in API behavior depend on the SDK you link against?

Some time ago, I noted that the Co­Initialize­Security function demands an absolute security descriptor, even though many functions in Windows produce self-relat

Featured in Issue #456 May 14, 2026

Issue also covered: ASP.NET Core, Azure, C#, .NET 9, EF Core, Kubernetes, .NET MAUI, OpenAI

Read this issue →

Announcing Agent Governance Toolkit MCP Extensions for .NET

Announcing a Public Preview .NET package that adds policy enforcement, startup tool scanning, fallback governance, and response sanitization to MCP servers with a single builder extension. The post A...

Featured in Issue #462 May 25, 2026

Issue also covered: AOT, ASP.NET Core, Azure, Clean Architecture, CQRS, .NET 10, EF Core, MediatR

Read this issue →

.NET and .NET Framework May 2026 servicing releases updates

Welcome to our combined .NET servicing updates for May 2026. Let's get into the latest release of .NET & .NET Framework, here is a quick overview of what's new in our servicing releases: Security ...

Featured in Issue #458 May 18, 2026

Issue also covered: .NET 10, .NET Framework, GitHub Copilot, .NET MAUI, Visual Studio, Visual Studio Code

Read this issue →

🚀 Integrating Hangfire into .NET 9 Applications

Master background task management in .NET 9 with Hangfire! This tutorial covers setup, job creation, security, monitoring, and best practices for reliable background processing.

Featured in Issue #448 May 05, 2026

Issue also covered: C#, .NET 10, EF Core, Performance, Semantic Kernel, Serilog, Web API

Read this issue →

CVE-2026-40372: ASP.NET Core Privilege Escalation

CVE-2026-40372: ASP.NET Core Privilege Escalation

Featured in Issue #447 May 04, 2026

Issue also covered: ASP.NET Core, C#, Design Patterns, ML.NET, Performance, Solid Principles, SQL Server

Read this issue →

.NET 10.0.7 Out-of-Band Security Update

We are releasing .NET 10.0.7 as an out-of-band (OOB) update to address a security issue introduced in Microsoft.AspNetCore.DataProtection Security update details This release includes a fix for

Featured in Issue #446 May 01, 2026

Issue also covered: ASP.NET Core, C#, .NET 10, Native AOT, Performance, Semantic Kernel, System.Text.Json

Read this issue →

Serving Media from Azure Blob Storage in ASP.NET Core : Downloads, Streaming and Secure Tickets

Azure Blob Storage is one of those services that quietly underpins a huge number of production systems. It’s where your audio recordings…

Featured in Issue #445 April 30, 2026

Issue also covered: ASP.NET Core, Authentication, Azure, Azure DevOps, C#, EF Core, GitHub Copilot, .NET MAUI

Read this issue →

Global Error Handling in ASP.NET Core Web API: Building Reliable, Secure, and Production-Ready APIs

Modern backend systems are expected to be stable, predictable, and easy to maintain. Users may forgive a failed request, but they rarely…

Featured in Issue #444 April 29, 2026

Issue also covered: ASP.NET Core, Authentication, Azure, Azure DevOps, Clean Architecture, Cosmos DB, C#, .NET Framework

Read this issue →

Securing the AI You’re Building: What the OWASP GenAI Data Security Guide Means for Developers Who…

Most AI security articles are written by security professionals explaining risks to developers. Continue reading on Towards AI »

Featured in Issue #443 April 28, 2026

Issue also covered: ASP.NET Core, Authentication, Blazor, C#, Design Patterns, .NET 10, EF Core, Minimal APIs

Read this issue →

JWT Authentication with .Introduction to NET To the layperson.

I have tried it now, so you need not.

Featured in Issue #438 April 21, 2026

Issue also covered: Azure, Clean Architecture, C#, .NET 10, EF Core, FluentValidation, GitHub Copilot, JWT

Read this issue →

Static Code Analysis in .NET: Open Source Tools That Actually Earn Their Place in Your Pipeline

How to combine free Roslyn analyzers for quality, style, and security — without drowning in warnings

Featured in Issue #434 April 15, 2026

Issue also covered: ASP.NET Core, Clean Architecture, CQRS, C#, .NET 10, EF Core, Performance, Roslyn

Read this issue →

How to Find Security Vulnerabilities in C# with Claude Code

Short history

Featured in Issue #432 April 13, 2026

Issue also covered: C#, Performance, PostgreSQL, Redis

Read this issue →

Securing Back-end App Service Web Apps with Private Endpoints

Service Endpoints (2019) Private Endpoints (2026) Scope Entire App Service Your specific app only Data exfiltration protection No Yes Public access Still reachable (blocked by rules) Blocked (access r...

Featured in Issue #427 April 06, 2026

Issue also covered: ASP.NET Core, Authentication, Authorization, C#, .NET Core, EF Core, OpenAI, Serilog

Read this issue →

Modernizing .NET — Part 17: Migrating SMTP Email to MailKit

Learn how to replace obsolete SmtpClient with MailKit for modern, secure, and cross-platform email delivery in .NET Core.

Featured in Issue #425 April 02, 2026

Issue also covered: ASP.NET Core, Blazor, C#, .NET 10, .NET Framework, EF Core, Kafka, .NET MAUI

Read this issue →

Creating a Mock RDP Server in C#

script that simulates pretending to be an RDP server.

Featured in Issue #424 April 01, 2026

Issue also covered: ASP.NET Core, C#, .NET 10, .NET Core, EF Core, GitHub Copilot, Native AOT, Performance

Read this issue →

Coding for Security with Chris Ayers

What does secure coding look like today? Carl and Richard talk to Chris Ayers about the MITRE ATT&CK matrix, a comprehensive breakdown of the tactics, techniques, and procedures black hats use to ...

Featured in Issue #423 March 31, 2026

Issue also covered: ASP.NET Core, Azure, C#, Performance, PostgreSQL

Read this issue →

AutoMapper's last free version has a security flaw

AutoMapper v14 has a high-severity vulnerability. Learn what it means, how to reproduce it, and how to fix or avoid the issue in your apps. The page AutoMapper's last free version has a security flaw ...

Featured in Issue #422 March 30, 2026

Issue also covered: ASP.NET Core, .NET Aspire, AutoMapper, Azure, Benchmarking, C#, .NET 10, EF Core

Read this issue →

How to Design a Multi-Tenant SaaS Platform on Microsoft Azure

A practical guide to designing a secure, scalable multi-tenant SaaS architecture on Microsoft Azure, covering tenancy models, data isolation, Azure services, and real-world architectural consideration...

Featured in Issue #421 March 27, 2026

Issue also covered: ASP.NET Core, Azure, .NET Core, .NET Framework, GitHub Actions, Performance, RabbitMQ, Serilog

Read this issue →

️ Custom Session Store for Complex Objects in ASP.NET Core

ASP.NET Core’s default session fails with complex objects. This post shows how to store them safely in memory.

Featured in Issue #420 March 26, 2026

Issue also covered: ASP.NET Core, Azure, EF Core, .NET MAUI, Performance, Visual Studio Code

Read this issue →

How to Protect Web Applications from DDoS Attacks?

Shield your web applications from DDoS attacks! Learn practical strategies using CDNs, WAFs, rate limiting, and more to maintain performance and availability.

Featured in Issue #419 March 25, 2026

Issue also covered: Benchmarking, C#, .NET 10, .NET 8, EF Core, OpenAI, Performance, Visual Studio Code

Read this issue →

How to Secure REST APIs Using OAuth 2.0 and JWT Authentication?

Secure REST APIs with OAuth 2.0 and JWT. Learn authentication, authorization, and best practices for robust API security in modern web applications.

Featured in Issue #418 March 24, 2026

Issue also covered: ASP.NET Core, Azure, C#, EF Core, .NET MAUI, OpenAI, Visual Studio Code

Read this issue →

How to Generate OTP in C#

Learn how to generate OTP (One-Time Password) in C# using both basic and secure methods. Implement secure authentication and verification in your applications.

Featured in Issue #414 March 18, 2026

Issue also covered: ASP.NET Core, Dapper, .NET 10, EF Core, MediatR, Performance, Source Generators, SQL Server

Read this issue →

MCP C# SDK 1.0 arrives with improved authorization server discovery

MCP C# SDK 1.0 arrives with improved authorization server discovery

Featured in Issue #413 March 17, 2026

Issue also covered: AOT, ASP.NET Core, Azure, Azure DevOps, Blazor, C#, Docker, .NET 10

Read this issue →

Adding Licensing to C# Applications: The Easy and Simple Way

The problem

Featured in Issue #410 March 12, 2026

Issue also covered: ASP.NET Core, Azure, Azure Functions, Clean Architecture, C#, .NET 10, .NET Core, Minimal APIs

Read this issue →

DotnetFastMCP: Enforcing Multi-Factor Authentication (MFA) for Critical AI Tools ️

AI Agents are getting powerful. We are moving from “Chatbots that summarize text” to “Agents that move money” and “Agents that deploy… Continue reading on Applied AI for App Devs »

Featured in Issue #407 March 09, 2026

Issue also covered: ASP.NET Core, Azure Functions, Benchmarking, C#, .NET Core, .NET Framework, EF Core, Performance

Read this issue →

How to Upload Files in ASP.NET Core Web API?

Learn how to implement secure and efficient file uploads in ASP.NET Core Web API. Covers handling IFormFile, validation, storage, and security best practices.

Featured in Issue #406 March 06, 2026

Issue also covered: ASP.NET Core, Azure Functions, Clean Architecture, C#, .NET Core

Read this issue →

DotnetFastMCP: Enforcing Multi-Factor Authentication (MFA) for Critical AI Tools ️

AI Agents are getting powerful. We are moving from “Chatbots that summarize text” to “Agents that move money” and “Agents that deploy… Continue reading on Applied AI for App Devs »

Featured in Issue #403 March 03, 2026

Issue also covered: ASP.NET Core, Azure, C#, .NET Core, EF Core, Performance, Redis, Visual Studio Code

Read this issue →

How to Enable HTTPS Redirection in ASP.NET Core?

Secure your ASP.NET Core apps! This guide details enabling HTTPS redirection, configuring certificates, handling reverse proxies, and implementing HSTS for robust security.

Featured in Issue #402 March 02, 2026

Issue also covered: ASP.NET Core, Azure, CQRS, C#, Docker, MediatR, OpenAI, Performance

Read this issue →

Building a .NET API Gateway: YARP Foundation, Health Checks, Load Balancing, and Security

Whether you’re building a small internal tool or a customer-facing application, there comes a point where you need more control over how…

Featured in Issue #401 February 27, 2026

Issue also covered: AOT, ASP.NET Core, .NET Aspire, Authentication, Authorization, Azure, C#, .NET Core

Read this issue →

How to Implement JWT Authentication in ASP.NET Core 8 Step by Step?

Secure your ASP.NET Core 8 APIs with JWT authentication! This step-by-step guide covers project setup, token generation, authorization, and production best practices for robust security.

Featured in Issue #400 February 26, 2026

Issue also covered: ASP.NET Core, Authentication, Authorization, Clean Architecture, C#, .NET Core, Performance, Redis

Read this issue →

Comparing Entity Framework Core vs Dapper: When to Choose What

Explore the differences between Entity Framework Core and Dapper for .NET data access. Learn when to choose each ORM based on performance, productivity, and control.

Featured in Issue #397 February 23, 2026

Issue also covered: ASP.NET Core, Authorization, Blazor, Clean Architecture, C#, Dapper, Design Patterns, .NET 10

Read this issue →

Why Enterprises Prefer .NET Development Services: Real Industry Insights & Benefits

In a digital-first world where performance, security, and scalability matter more than ever, enterprises are constantly evaluating the…

Featured in Issue #394 February 18, 2026

Issue also covered: Domain-Driven Design, .NET 10, EF Core, GitHub Copilot, gRPC, Performance, REST API, Semantic Kernel

Read this issue →

Multiplexed RBAC in .NET — Part 2 : Distributed Rotational Cache with Redis & Lua

Distributed RBAC cache in .NET using Redis, Lua atomicity, overlap-safe rotation and graceful fallback.

Featured in Issue #392 February 16, 2026

Issue also covered: AOT, ASP.NET Core, Authentication, Authorization, C#, .NET Core, .NET Framework, EF Core

Read this issue →

Are exceptions exposing vulnerabilities in your .NET App?

Unhandled exceptions in ASP.NET Core can expose sensitive data. Learn when it happens, why it's dangerous, and how to fix it. The page Are exceptions exposing vulnerabilities in your .NET App? appeare...

Featured in Issue #390 February 12, 2026

Issue also covered: ASP.NET Core, Azure, Clean Architecture, C#, .NET 10, .NET Core, Minimal APIs, OpenAI

Read this issue →

Building Modern Web Applications with Angular, .NET, and OAuth 2.0 — Complete Tutorial Series

Learn how to build secure, scalable enterprise applications using the CAT Pattern (Client, API Resource, Token Service) with Angular 20… Continue reading on Scrum and Coke »

Featured in Issue #389 February 11, 2026

Issue also covered: C#, Design Patterns, .NET 10, EF Core, GitHub Copilot, OAuth, OpenAI, Performance

Read this issue →

Stop Using AllowAnyOrigin()

AllowAnyOrigin() might look like a quick fix for CORS errors, but it silently opens the door to serious security risks.

Featured in Issue #388 February 10, 2026

Issue also covered: Authentication, Authorization, Azure, EF Core, Kafka, Performance, Source Generators, Visual Studio

Read this issue →

How to Enable Microsoft Entra ID for Azure Cosmos DB (NoSQL)

Strengthen Identity Security and Eliminate Account Keys Identity is becoming the new security perimeter. As organizations modernize their cloud applications, long‑lived secrets and shared keys introdu...

Featured in Issue #387 February 09, 2026

Issue also covered: ASP.NET Core, Azure, Azure Functions, Blazor, Cosmos DB, CQRS, Docker, .NET 10

Read this issue →

.NET Conf Recap: Top announcement and features

Security Software False Positives

Featured in Issue #385 February 05, 2026

Issue also covered: Azure, C#, .NET 10, GitHub Copilot, OpenAI, Performance, Source Generators, Visual Studio Code

Read this issue →

Implementing Level of Identification (LoI) with ASP.NET Core Identity and Duende

This article explores how to implement Level of Identification (LOI) in an ASP.NET Core application. The solution uses Duende IdentityServer as the OpenID Connect provider and ASP.NET Core Identity fo...

Featured in Issue #378 January 27, 2026

Issue also covered: ASP.NET Core, Authentication, Azure, Clean Architecture, C#, Design Patterns, .NET 10, .NET Core

Read this issue →

Locking Down Swagger: Implementing Basic Auth & API Key Security in .NET

Implementing Basic Auth & API Key Security in .NET

Featured in Issue #377 January 26, 2026

Issue also covered: C#, .NET 10, EF Core, Performance, RabbitMQ

Read this issue →

Secure file upload validation in .NET: A layered approach

I thought file uploads were simple… until I saw how often they aren’t. This article shows a practical .NET baseline that covers common…

Featured in Issue #376 January 23, 2026

Issue also covered: ASP.NET Core, Azure, C#, Design Patterns, .NET Core, .NET Framework, EF Core, Performance

Read this issue →

Why .NET Core Still Feels Like the Future of Backend Development

.NET Core remains a top choice for backend development in 2026. Explore its cross-platform capabilities, performance, cloud-native features, and robust security. A future-proof ecosystem!

Featured in Issue #375 January 22, 2026

Issue also covered: Azure, Azure Functions, C#, .NET 10, Performance, Redis

Read this issue →

What is C# Used For in 2026?

Explore C#'s diverse uses in 2026: web, cloud, enterprise, games, mobile, and more. Discover why C# remains a top choice for developers seeking scalability and security.

Featured in Issue #373 January 20, 2026

Issue also covered: Azure Functions, Blazor, C#, .NET 10, .NET Framework, .NET MAUI, Performance, Visual Studio

Read this issue →

Set the amr claim when using passkeys authentication in ASP.NET Core

The post shows how to set the correct amr value when authenticating using ASP.NET Core Identity and passkeys in .NET 10. When authenticating using OpenID Connect and passkeys authentication, the OpenI...

Featured in Issue #371 January 16, 2026

Issue also covered: ASP.NET Core, C#, EF Core, Performance, Source Generators

Read this issue →

Why Most Multi-Tenant RAG Apps Will Leak Data (And How to Actually Prevent It)

This is Part 1 of the Production AI Series, where we explore the hidden engineering challenges of shipping AI apps in .NET.

Featured in Issue #369 January 14, 2026

Issue also covered: AOT, ASP.NET Core, Blazor, Clean Architecture, C#, Domain-Driven Design, Design Patterns, .NET 10

Read this issue →

Authentication and authorization best practices in .Net

Authentication and authorization are two pillars of application security.

Featured in Issue #368 January 13, 2026

Issue also covered: Authentication, Authorization, Azure, Azure Functions, .NET 9, Native AOT, OpenAI, Performance

Read this issue →

Practical JWT Mastery in .NET

Part 8 : Real Architectures

Featured in Issue #363 January 06, 2026

Issue also covered: Azure, Azure Functions, C#, .NET 10, JWT, Minimal APIs, OpenAI, Performance

Read this issue →

.NET 10 and ASP.NET Core: Refinements That Matter in Production

Discover what’s new in ASP.NET Core with .NET 10. Explore enhance security, observability, and performance for production apps. Discover improvements in Blazor, APIs, and authentication!

Featured in Issue #361 January 02, 2026

Issue also covered: ASP.NET Core, Clean Architecture, C#, .NET 10, EF Core, GitHub Copilot, Performance, Redis

Read this issue →

Practical JWT Mastery in .NET

Part 4: Cryptographic Signing

Featured in Issue #360 January 01, 2026

Issue also covered: Azure, Benchmarking, Clean Architecture, C#, .NET 10, JWT, Minimal APIs, ML.NET

Read this issue →

ASP.NET Development Services: Building Secure, Scalable, and High-Performance Web Applications

In today’s rapidly evolving digital landscape, businesses require web applications that are not only visually appealing but also secure…

Featured in Issue #359 December 31, 2025

Issue also covered: ASP.NET Core, CQRS, C#, .NET 10, .NET 8, .NET 9, GitHub Copilot, MediatR

Read this issue →

Authentication in .NET — Part 12: Session & Cookie Security Hardening (Final Part)

In the previous parts of this series, we explored authentication flows, identity providers, JWTs, multi-tenancy, MFA, and API security…

Featured in Issue #355 December 25, 2025

Issue also covered: ASP.NET Core, Authentication, C#, Dapper, Docker, .NET 10, .NET Framework, EF Core

Read this issue →

Authentication in .NET — A Complete 12-Part Series (Overview & Guide)

Over the past weeks, I’ve been writing a 12-part series on Authentication in .NET, aimed at software engineers and architects who want…

Featured in Issue #354 December 24, 2025

Issue also covered: .NET Aspire, Authentication, Authorization, Azure Functions, C#, .NET 9, FluentValidation, Performance

Read this issue →

JWT Is NOT Authentication

And If You Think It Is, Your System Is Lying to You

Featured in Issue #353 December 23, 2025

Issue also covered: AOT, ASP.NET Core, Azure Functions, Clean Architecture, C#, .NET Core, EF Core, Kubernetes

Read this issue →

Stop writing all validation logic inside your .NET Controllers

Your controller should be a traffic cop not a security guard. Continue reading on Readers Club »

Featured in Issue #352 December 22, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, C#, .NET 10, .NET Core, .NET Framework, EF Core

Read this issue →

We Let Cursor Write Our .NET Code. Then “Stupid Bugs” Exploded — Here’s the Fix

Last month we did what everyone is doing in 2025:

Featured in Issue #351 December 19, 2025

Issue also covered: C#, .NET 9, OpenAI, Performance, Redis, REST API, Semantic Kernel, Source Generators

Read this issue →

Token Authentication In ASP.NET Core 9 With JWT | Clean Architecture (.NET 9 & .NET 10)

🔥 Part 1 — Foundations: Architecture, JWT Theory, and Clean Project Setup

Featured in Issue #350 December 18, 2025

Issue also covered: ASP.NET Core, Authentication, Azure, Clean Architecture, Cosmos DB, C#, Domain-Driven Design, Design Patterns

Read this issue →

.NET 10 Networking Improvements

Introducing new networking features in .NET 10 including HTTP space, WebSockets, security and more! The post .NET 10 Networking Improvements appeared first on .NET Blog.

Featured in Issue #349 December 17, 2025

Issue also covered: ASP.NET Core, Azure, Clean Architecture, CQRS, C#, Design Patterns, .NET 10, .NET 9

Read this issue →

How to Detect Spam from Text Input in C# .NET Core

Detecting and blocking spam inputs in our application starts with accurately classifying what spam is.

Featured in Issue #348 December 16, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, Clean Architecture, C#, .NET 10, EF Core, Minimal APIs

Read this issue →

Building Reliable Webhooks in ASP.NET Core

A practical guide to request validation, retry handling, and idempotency with real-world examples

Featured in Issue #347 December 15, 2025

Issue also covered: ASP.NET Core, Azure, Clean Architecture, C#, Design Patterns, .NET 10, .NET 8, EF Core

Read this issue →

Taming the Three-Headed Dog: Kerberos Authentication with .NET

From Tickets to C# Code — Might look a like (not) SSO

Featured in Issue #346 December 12, 2025

Issue also covered: ASP.NET Core, .NET Aspire, Authentication, C#, .NET 10, .NET Core, Minimal APIs, Performance

Read this issue →

How do I check whether the user has permission to create files in a directory?

A customer wanted to accept a directory entered by the user and verify that the user has permission to create files in that folder. The directory itself might not even be on a local hard drive; it cou...

Featured in Issue #344 December 10, 2025

Issue also covered: AOT, ASP.NET Core, Blazor, C#, Design Patterns, EF Core, .NET MAUI, Performance

Read this issue →

Using Azure Key Vault to Protect Secrets in .NET Apps

Storing secrets like database passwords, JWT keys, API tokens, or connection strings inside your application is risky. If someone gets…

Featured in Issue #343 December 09, 2025

Issue also covered: ASP.NET Core, Azure, Clean Architecture, C#, Domain-Driven Design, EF Core, Native AOT, Performance

Read this issue →

How to Build HIPAA-Compliant ASP.NET Healthcare Apps in 2026

Learn how to build secure, HIPAA-compliant healthcare apps using ASP.NET Core and Azure. Includes architecture, security controls, deployment steps, and 2026 best practices.

Featured in Issue #333 November 25, 2025

Issue also covered: Azure, Cosmos DB, C#, .NET 10, GitHub Copilot, Performance, Unit Testing, Web API

Read this issue →

Preventing Over-Posting and Under-Posting in EF Core Models

A practical guide to securing your .NET APIs by preventing over-posting, under-posting, and unintended EF Core data updates.

Featured in Issue #332 November 24, 2025

Issue also covered: ASP.NET Core, Azure, .NET Core, EF Core, JWT, .NET MAUI, OAuth, SQL Server

Read this issue →

Behind the scenes on how Windows 95 application compatibility patched broken programs

Whenever possible, Windows 95 made application compatibility tweaks through things like compatibility flags that alter the behavior of the system for any program the flag was applied to. Using compati...

Featured in Issue #331 November 21, 2025

Issue also covered: ASP.NET Core, .NET Aspire, C#, .NET 10, EF Core, MediatR, Performance, Redis

Read this issue →

What's New in NuGet

Join us to learn how these updates help you work faster, maintain secure and reliable dependencies, and stay ahead in the package ecosystem that powers the .NET community. NuGet is evolving to deliver...

Featured in Issue #328 November 18, 2025

Issue also covered: ASP.NET Core, Authorization, Azure, CQRS, .NET 10, EF Core, GitHub Copilot, Minimal APIs

Read this issue →

️Defensive Coding in .NET — How to Make Bugs Afraid of You

“You deploy your code on Friday evening. Everything looks perfect… until Monday morning when a null reference breaks production.”

Featured in Issue #327 November 17, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, CQRS, C#, Dapper, .NET 10, EF Core

Read this issue →

How to Encrypt PAN in JavaScript and Decrypt in C#

Secure sensitive data like PAN by encrypting it client-side with CryptoJS, decrypting server-side in C#, and preventing storage in ViewState. Protect data in transit and at rest.

Featured in Issue #326 November 14, 2025

Issue also covered: ASP.NET Core, Authentication, Azure, C#, Dapper, .NET 9, JWT, OAuth

Read this issue →

ASP.NET Core REST API Best Practices: The 2025 Developer’s Guide

Learn ASP.NET Core REST API best practices for 2025. Master HTTP methods, status codes, JWT auth, versioning & pagination.

Featured in Issue #324 November 12, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, Clean Architecture, C#, Docker, .NET 8, .NET 9

Read this issue →

Key Innovations in ASP.NET Core 9 (and beyond)

Explore ASP.NET Core 9's key innovations: static asset optimization, enhanced Minimal APIs, Blazor improvements, security, and performance boosts for modern web apps.

Featured in Issue #323 November 11, 2025

Issue also covered: Application Insights, ASP.NET Core, C#, Domain-Driven Design, .NET 10, .NET 9, EF Core, gRPC

Read this issue →

GitHub Profile Setup and Security

Secure your GitHub! This guide covers enabling 2FA with authenticator apps and creating a personalized profile README to showcase your skills and projects. Make a great first impression!

Featured in Issue #322 November 10, 2025

Issue also covered: ASP.NET Core, Blazor, C#, .NET Core, EF Core, GitHub, Performance

Read this issue →

Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315

In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it

Featured in Issue #319 November 05, 2025

Issue also covered: Application Insights, ASP.NET Core, Azure DevOps, .NET 10, EF Core, GitHub Copilot, Minimal APIs, ML.NET

Read this issue →

Dubious security vulnerability: Denial of service by loading a very large file

A denial of service vulnerability report was filed against a program, let's call it Notepad. The actual text of the report was very hard to understand because the grammar was all messed up. I'll give ...

Featured in Issue #318 November 04, 2025

Issue also covered: ASP.NET Core, Azure, Clean Architecture, C#, .NET 10, .NET Core, EF Core, MediatR

Read this issue →

Simple Image Uploads in a React & .NET Application

And the API credibility & security concerns you must consider.

Featured in Issue #317 November 03, 2025

Issue also covered: ASP.NET Core, Azure, .NET 8, .NET 9, .NET Core, EF Core, Performance, SignalR

Read this issue →

.NET Secrets Management with Azure App Configuration & Key Vault

Ensure Secure, Scalable, and Resilient Secret Management Across All Environments and Regions in .NET

Featured in Issue #315 October 30, 2025

Issue also covered: Application Insights, ASP.NET Core, AutoMapper, Azure, Clean Architecture, CQRS, C#, Dapper

Read this issue →

Implementing a Custom Authorization Handler in .NET

If you want the full source code, join our community: Here

Featured in Issue #313 October 28, 2025

Issue also covered: ASP.NET Core, Authentication, Authorization, Azure, Azure Functions, Clean Architecture, Cosmos DB, CQRS

Read this issue →

Announcing the .NET Security Group - .NET Blog

Learn how to join the .NET Security Group for early access to CVE information and help deliver security patches to your .NET distribution simultaneously with Microsoft.

Featured in Issue #311 October 24, 2025

Issue also covered: .NET Aspire, Blazor, C#, Design Patterns, .NET 10, EF Core, GitHub Copilot, OpenAI

Read this issue →

JWT Authentication Ninja: Complete ASP.NET Core Security Guide with Refresh Tokens & Claims (Part-12 of 40)

Master ASP.NET Core security with this comprehensive JWT authentication guide! Learn to implement robust security measures, including refresh tokens, role-based authorization, password policies, rate ...

Featured in Issue #310 October 23, 2025

Issue also covered: ASP.NET Core, Azure, Azure DevOps, Azure Functions, CQRS, C#, Design Patterns, .NET 9

Read this issue →

Integrating Visa CyberSource in .NET: A Practical Guide

Learn how to integrate Visa CyberSource in .NET for secure, seamless payment processing with best practices…

Featured in Issue #309 October 22, 2025

Issue also covered: Application Insights, ASP.NET Core, Azure, Clean Architecture, C#, Domain-Driven Design, Docker, .NET 9

Read this issue →

ASP.NET Core Identity Unleashed: Complete Guide to Registration, Roles, 2FA & Security (Part 13 of 40)

Unlock the full potential of ASP.NET Core Identity with this comprehensive guide! Master user registration, role-based authorization, claims, and 2FA. Learn to implement secure identity systems with p...

Featured in Issue #308 October 21, 2025

Issue also covered: ASP.NET Core, Azure, CQRS, C#, .NET 10, Performance, SQL Server

Read this issue →

How to Disarm and Reconstruct Files in C#

In this brief article, we’ll provide context for Content Disarm and Reconstruction (CDR) file sanitization in threat scanning workflows…

Featured in Issue #306 October 17, 2025

Issue also covered: AOT, ASP.NET Core, Azure, Blazor, Clean Architecture, C#, .NET 9, EF Core

Read this issue →

.NET R&D Digest (September, 2025)

This issue includes bits of AI, software development, learning, C#, performance, security, C, programming languages, ruby, and of course .NET and .NET Internals.

Featured in Issue #301 October 10, 2025

Issue also covered: ASP.NET Core, Clean Architecture, C#, .NET Framework, EF Core, Performance, PostgreSQL, Source Generators

Read this issue →

How to Secure Your ASP.NET Core Web API with API Key Authentication in .NET

In today’s interconnected world, securing your APIs is not optional — it’s essential. Whether you’re building microservices, mobile… Continue reading on FullStack Web Development »

Featured in Issue #300 October 09, 2025

Issue also covered: AOT, ASP.NET Core, Azure, CQRS, Docker, .NET 9, .NET Core, GitHub Copilot

Read this issue →

ASP.NET Web.Config: Redirects, Security, and URL Rewriting Explained

Master ASP.NET Web.config: redirects, security, URL rewriting, custom errors, and connection strings. Optimize your web app's configuration & security!

Featured in Issue #299 October 08, 2025

Issue also covered: Azure, Blazor, C#, .NET 10, .NET Core, EF Core, Performance, SignalR

Read this issue →

Token Validation and Generation in ASP.NET – Step-by-Step Guide

Secure your ASP.NET apps! Learn to generate & validate tokens for NSE IPO APIs. Step-by-step C# guide with code examples & best practices.

Featured in Issue #298 October 07, 2025

Issue also covered: ASP.NET Core, Azure, Azure Functions, C#, .NET 10, .NET 9, .NET Core, .NET MAUI

Read this issue →

Azure IIS Setup: Installing a Free Let’s Encrypt SSL Certificate

Secure your Azure-hosted IIS web applications with a free Let's Encrypt SSL certificate! This step-by-step guide walks you through the entire process, from prerequisites to verification, ensuring encr...

Featured in Issue #297 October 06, 2025

Issue also covered: ASP.NET Core, Azure, Azure DevOps, Blazor, Clean Architecture, CQRS, C#, Domain-Driven Design

Read this issue →

Best Ways to Handle Null Reference Exceptions in C#

This article provides practical strategies to prevent and handle NREs effectively. Learn to use null checks, the null-conditional and coalescing operators, proper object initialization, and C# 8's nul...

Featured in Issue #296 October 03, 2025

Issue also covered: ASP.NET Core, Authentication, Azure, Blazor, C#, Docker, EF Core, GitHub Copilot

Read this issue →

How to Secure Your C# Applications: Best Practices & Code Examples

Why Security Should Be Your Top Priority Continue reading on Stackademic »

Featured in Issue #292 September 29, 2025

Issue also covered: ASP.NET Core, .NET Aspire, Authentication, Azure, C#, Design Patterns, .NET 10, EF Core

Read this issue →

Penetration Testing Basics for ASP.NET Core Web Applications

Secure your ASP.NET Core web applications with this practical guide to penetration testing. Learn essential techniques, from reconnaissance to reporting, with C# examples. Discover how to identify vul...

Featured in Issue #291 September 26, 2025

Issue also covered: ASP.NET Core, .NET Aspire, Benchmarking, C#, .NET 9, .NET Core, Performance, Serilog

Read this issue →

How to Perform Security Testing on ASP.NET Core Applications

Comprehensive guide to ASP.NET Core security testing, covering static analysis, dependency scanning, secure configuration, and dynamic testing. Learn to implement security headers, validate inputs, ha...

Featured in Issue #290 September 25, 2025

Issue also covered: ASP.NET Core, Azure, Benchmarking, Clean Architecture, C#, Domain-Driven Design, .NET 10, .NET 9

Read this issue →

How a Tiny Token in .NET Stopped a Million-Dollar Mistake

Discover the overlooked role of __RequestVerificationToken, why it’s critical for web security, and the lessons I learned the hard way as…

Featured in Issue #288 September 19, 2025

Issue also covered: ASP.NET Core, Authentication, .NET 8, OpenAI, Performance, Source Generators, Visual Studio

Read this issue →

.NET Mastery: 40+ Essential Practices for Clean, Secure, and Scalable Code

1. Use Dependency Injection (DI) Properly

Featured in Issue #287 September 18, 2025

Issue also covered: ASP.NET Core, Azure, C#, .NET 10, .NET Core, MediatR, Performance, System.Text.Json

Read this issue →

AspGoat: The First Intentionally Vulnerable modern ASP.NET Core App for OWASP Top 10

Most intentionally vulnerable applications we know and use for training like DVWA, Juice Shop, and WebGoat are written in PHP , Node.JS… Continue reading on InfoSec Write-ups »

Featured in Issue #286 September 17, 2025

Issue also covered: AOT, ASP.NET Core, Azure, Azure Functions, Benchmarking, C#, .NET 8, EF Core

Read this issue →

How to Secure a Website?

Protect your website from cyber threats with our comprehensive guide to website security. Learn essential practices, from SSL/TLS encryption and WAF implementation to secure coding, access control, an...

Featured in Issue #285 September 16, 2025

Issue also covered: ASP.NET Core, AutoMapper, Azure, Blazor, Clean Architecture, C#, .NET 10, .NET 9

Read this issue →

Add API key authentication to an Minimal API endpoint

Learn how to add API key authentication to a minimal API endpoint by using a saved key in the config and how you can add a fallback policy to protect all routes. The page Add API key authentication to...

Featured in Issue #284 September 15, 2025

Issue also covered: AOT, ASP.NET Core, Authentication, Azure, Benchmarking, Blazor, C#, .NET 10

Read this issue →

File and Input Security in ASP.NET Core MVC and Web API Applications Introduction

Protect your ASP.NET Core MVC and Web API applications from critical vulnerabilities! This article provides essential best practices for securing file uploads and user inputs. Learn how to prevent SQL...

Featured in Issue #283 September 12, 2025

Issue also covered: ASP.NET Core, Authentication, Authorization, Azure, Blazor, Clean Architecture, C#, .NET 8

Read this issue →

Secure Coding Guidelines for ASP.NET Core MVC & Web API

Fortify your ASP.NET Core MVC & Web API applications with these essential secure coding guidelines. Learn practical techniques to prevent common vulnerabilities like XSS, CSRF, and SQL injection. ...

Featured in Issue #282 September 11, 2025

Issue also covered: ASP.NET Core, Blazor, C#, .NET 10, EF Core, Performance, Serilog

Read this issue →

Protecting Against JSON Injection and Malformed Payloads in ASP.NET Core

Protect your ASP.NET Core APIs from JSON injection and malformed payloads! This guide details how to prevent attacks like privilege escalation, DoS, and XSS. Learn to use DTOs, strict validation, requ...

Featured in Issue #281 September 10, 2025

Issue also covered: ASP.NET Core, Azure, C#, Docker, .NET 10, EF Core, GitHub Copilot, Minimal APIs

Read this issue →

Top 10 Application Security Best Practices for .NET Developers

Elevate your .NET application security! This guide provides 10 essential best practices for .NET developers using ASP.NET Core MVC, Web API, and .NET Framework. Learn to prevent SQL injection, XSS, CS...

Featured in Issue #280 September 09, 2025

Issue also covered: .NET Aspire, Azure, C#, .NET 10, Minimal APIs, ML.NET, Performance, Unit Testing

Read this issue →

How I Built a Private ChatGPT That Knows Everything About My Company

We will be creating Local Chat GPT for organization which will answer smartly based on internal data of organization Continue reading on Artificial Intelligence in Plain English »

Featured in Issue #279 September 08, 2025

Issue also covered: ASP.NET Core, Azure, C#, .NET Core, EF Core, .NET MAUI, Performance, Visual Studio

Read this issue →

How to add Digital Signature in C# using KAiZEN APIs?

Easily add digital signatures to your applications!

Featured in Issue #277 September 04, 2025

Issue also covered: ASP.NET Core, Azure, CQRS, C#, .NET 10, .NET Core, EF Core, GitHub Copilot

Read this issue →

Application Security Best Practices for Developers in C# Applications

Enhance C# application security! Learn best practices for authentication, authorization, data protection, and more. Secure your ASP.NET Core apps now!

Featured in Issue #276 September 03, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, C#, Dapper, .NET 9, .NET Core, EF Core

Read this issue →

Application Security Against DoS and DDoS Attacks in ASP.NET Core Web API Introduction

Protect your ASP.NET Core Web API from DoS and DDoS attacks! Learn practical techniques like rate limiting, IP filtering, caching, and WAF deployment for robust security.

Featured in Issue #275 September 02, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, C#, .NET 9, EF Core, GitHub, .NET MAUI

Read this issue →

Credential Security in ASP.NET Core Web API: Best Practices and Implementation

Learn how to secure credentials in ASP.NET Core Web API using best practices such as secret management, authentication, HTTPS, and Azure Key Vault to protect sensitive data and prevent leaks.

Featured in Issue #274 September 01, 2025

Issue also covered: ASP.NET Core, Authentication, Authorization, AutoMapper, Azure, C#, Design Patterns, .NET 10

Read this issue →

Global Exception Handling in ASP.NET Core: From Throw to ProblemDetails

Centralized error handling with ProblemDetails in ASP.NET Core

Featured in Issue #273 August 29, 2025

Issue also covered: ASP.NET Core, Azure, Cosmos DB, C#, .NET Core, .NET Framework, GitHub Copilot, OpenAI

Read this issue →

Reset Cookies and force new sign-in using ASP.NET Core Identity

This post looks at implementing a cookie reset in an ASP.NET Core application using Duende identity server which federates to Entra ID. Sometimes cookies need to be reset for end users due to size pro...

Featured in Issue #272 August 28, 2025

Issue also covered: ASP.NET Core, .NET Aspire, Clean Architecture, C#, .NET 10, .NET 9, .NET Core, EF Core

Read this issue →

5 .NET Core Code Patterns for Bulletproof FDA-Compliant MedTech Software

Build bulletproof FDA-compliant MedTech software with these 5 .NET code patterns. Ensure audit trails, e-signatures & HIPAA security. Download our free checklist.

Featured in Issue #270 August 26, 2025

Issue also covered: ASP.NET Core, Blazor, CQRS, C#, Dapper, Domain-Driven Design, .NET 10, .NET 9

Read this issue →

Stop Using Try-Catch for Everything — Microsoft’s Real Error Handling Patterns in C#

Structured exception handling is powerful — but if you treat try-catch as your only error-handling tool, you’re silently breaking… Continue reading on Dev Genius »

Featured in Issue #268 August 22, 2025

Issue also covered: ASP.NET Core, Azure, C#, .NET 9, .NET Core, EF Core, GitHub Copilot, Native AOT

Read this issue →

Restricting Login by IP Address in ASP.NET

Secure your ASP.NET admin panel by restricting login access to specific IP addresses. Learn how to configure web.config and implement C# code to allow only trusted IPs for better security.

Featured in Issue #267 August 21, 2025

Issue also covered: AOT, Application Insights, ASP.NET Core, .NET Aspire, Azure, Benchmarking, Blazor, Clean Architecture

Read this issue →

On .NET Live - Compliance in .NET: The Right Way to Classify & Redact Data

Join us for a deep dive into **compliance in .NET** with special guests **Mariam Aziz** and **Darius Letterman**, two of the engineers behind the `Microsoft.Extensions.Compliance.Abstractions` and `Mi...

Featured in Issue #266 August 20, 2025

Issue also covered: Application Insights, ASP.NET Core, Authentication, Azure, C#, .NET Core, EF Core, GitHub

Read this issue →

A Comprehensive Guide to Development, Deployment, Security, and Best Practices

Building Robust APIs with the Microsoft Stack: A Comprehensive Guide to Development, Deployment, Security, and Best Practices.

Featured in Issue #265 August 19, 2025

Issue also covered: AOT, ASP.NET Core, Azure, Clean Architecture, CQRS, C#, Dapper, Domain-Driven Design

Read this issue →

The 2-Line Change That Made Our .NET App Pass the OWASP Top 10 Audit

We didn’t rewrite endpoints. We didn’t refactor middleware. Just two lines and one vault check saved our .NET app from a major security… Continue reading on .Net Programming »

Featured in Issue #264 August 18, 2025

Issue also covered: ASP.NET Core, Authentication, Authorization, Azure, Blazor, Clean Architecture, C#, .NET Core

Read this issue →

Best Practice to Make your Project Cleaner in .NET Core

Discover essential best practices for building clean, maintainable .NET Core projects. Learn effective project structuring, dependency injection, configuration, logging, testing, security, and API des...

Featured in Issue #263 August 15, 2025

Issue also covered: ASP.NET Core, Azure, Clean Architecture, C#, Domain-Driven Design, Design Patterns, .NET 8, .NET 9

Read this issue →

.NET 10 Preview 6: The Performance & Security Powerhouse You’ve Been Waiting For

The momentum behind .NET continues its relentless march as Microsoft introduces .NET 10 Preview 6, propelling the development ecosystem… Continue reading on Stackademic »

Featured in Issue #262 August 14, 2025

Issue also covered: ASP.NET Core, Azure, C#, .NET 10, .NET 9, .NET Core, GitHub Copilot, .NET MAUI

Read this issue →

How do I secure a .NET Web API (JWT, OAuth, Identity)?

Learn how to secure your .NET Web API using JWT, OAuth2, and ASP.NET Core Identity. Implement token-based authentication, role-based access control, and protect your endpoints with best practices.

Featured in Issue #261 August 13, 2025

Issue also covered: ASP.NET Core, Authentication, Authorization, Azure, CQRS, C#, Design Patterns, .NET 9

Read this issue →

Passkey support for ASP.NET Core identity: Exploring the .NET 10 preview - Part 6

In this post I look at the passkey support added to ASP.NET Core Identity and the Blazor Web App template, explore how it works, and look at the implementation

Featured in Issue #259 August 11, 2025

Issue also covered: ASP.NET Core, C#, .NET 10, Performance, Source Generators, SQL Server, Unit Testing, Visual Studio

Read this issue →

🔐 How to Secure .NET Web API Endpoints with JWT and [Authorize]

As modern applications increasingly rely on stateless, scalable backends, securing your API is essential. JSON Web Tokens (JWT) are one of the most common methods for securing RESTful APIs in .NET. In...

Featured in Issue #258 August 08, 2025

Issue also covered: ASP.NET Core, Blazor, C#, .NET Core, EF Core, GitHub Copilot, JWT, Performance

Read this issue →

Understanding Sealed Classes in C# with Example

In C#, a sealed class prevents inheritance, ensuring its behavior can't be altered through subclassing. It enhances security, enforces design rules, and can improve performance in certain scenarios.

Featured in Issue #257 August 07, 2025

Issue also covered: .NET Aspire, Authentication, Authorization, Azure, C#, .NET 10, EF Core, GitHub Copilot

Read this issue →

Best Practices for Implementing JWT Auth in .NET Core and React

Master secure JWT authentication for .NET Core APIs and React frontends. Learn battle-tested implementation strategies, avoid critical security flaws, and implement best practices for enterprise-grade...

Featured in Issue #255 August 05, 2025

Issue also covered: Azure, Clean Architecture, C#, JWT, Performance, REST API, Unit Testing

Read this issue →

Security Best Practices in MERN Stack (2025 Guide)

Learn essential MERN stack security practices for 2025, including input validation, HTTPS, JWT auth, CSRF protection, secure headers, MongoDB access, and more to build safe, resilient full-stack appli...

Featured in Issue #254 August 04, 2025

Issue also covered: ASP.NET Core, C#, .NET 9, EF Core, Web API

Read this issue →

How I Built a .NET Security Scanner Without a Security Team (And Blocked 90% of Vulnerabilities)

https://medium.com/c-sharp-programming/how-i-built-a-net-security-scanner-without-a-security-team-and-blocked-90-of-vulnerabilities-ac0803ef5bea

Featured in Issue #252 July 31, 2025

Issue also covered: Application Insights, Authentication, Azure, Azure Functions, Benchmarking, Clean Architecture, C#, Domain-Driven Design

Read this issue →

Secure Your .NET

https://blog.stackademic.com/secure-your-net-51eb28c0675f

Featured in Issue #251 July 30, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, C#, .NET 10, EF Core, .NET MAUI, MediatR

Read this issue →

Rust or C#? : Developer Security Quick Fire Questions @ MS Build

https://www.youtube.com/shorts/VdlsiBj2FOo

Featured in Issue #250 July 29, 2025

Issue also covered: ASP.NET Core, Clean Architecture, .NET 9, EF Core, GitHub Copilot, Performance, RabbitMQ, Redis

Read this issue →

Only Admins Allowed: How to Lock Down Your REST API with Roles

https://medium.com/dot-net-sql-learning/only-admins-allowed-how-to-lock-down-your-rest-api-with-roles-b6845cf74b1e?source=rss------dotnet-5

Featured in Issue #246 July 23, 2025

Issue also covered: ASP.NET Core, .NET Aspire, Blazor, Clean Architecture, C#, Domain-Driven Design, Docker, .NET 10

Read this issue →

The API Key Trap: Are You Putting Your Entire System at Risk?

https://medium.com/dot-net-sql-learning/the-api-key-trap-are-you-putting-your-entire-system-at-risk-cea2b976449b

Featured in Issue #245 July 22, 2025

Issue also covered: ASP.NET Core, Authentication, Authorization, Azure, Clean Architecture, C#, Dapper, Design Patterns

Read this issue →

dnSpy—Static Analysis of a .NET Malware

https://medium.com/@tarunrd77/dnspy-static-analysis-of-a-net-malware-012806424acf

Featured in Issue #237 July 10, 2025

Issue also covered: ASP.NET Core, Authentication, Azure, C#, .NET Core, EF Core, JWT, .NET MAUI

Read this issue →

Building a Complete 2FA System: From Theory to Implementation

https://medium.com/@lowva96/building-a-complete-2fa-system-from-theory-to-implementation-0be626ea391c

Featured in Issue #233 July 04, 2025

Issue also covered: ASP.NET Core, Blazor, C#, .NET Core, EF Core, GitHub, gRPC, .NET MAUI

Read this issue →

Secrets Management in .NET Projects: What You’re Doing Wrong

https://medium.com/@kittikawin_ball/secrets-management-in-net-projects-what-youre-doing-wrong-2c0bd3007bf1

Featured in Issue #230 July 01, 2025

Issue also covered: Authentication, Authorization, Azure, Azure DevOps, Clean Architecture, C#, .NET 9, EF Core

Read this issue →

Zero-Trust ASP.NET Core 10 Security

https://medium.com/@Adem_Korkmaz/zero-trust-asp-net-core-10-security-f16c70c6fec9

Featured in Issue #229 June 30, 2025

Issue also covered: ASP.NET Core, C#, Dapper, .NET Core, Minimal APIs, Performance, Solid Principles

Read this issue →

Critical .NET and .NET Framework Updates Issued in June 2025: Addressing a Remote Code Execution

https://medium.com/@csmax/critical-net-and-net-framework-updates-issued-in-june-2025-addressing-a-remote-code-execution-2f5ace9fa079

Featured in Issue #227 June 26, 2025

Issue also covered: ASP.NET Core, Azure, C#, .NET 10, EF Core, GitHub Actions, GitHub Copilot, Kubernetes

Read this issue →

The 1 Reckless EF Core Habit That Nearly Deleted My Client’s Data

https://medium.com/c-sharp-programming/the-1-reckless-ef-core-habit-that-nearly-deleted-my-clients-data-468a3e6951aa

Featured in Issue #226 June 25, 2025

Issue also covered: ASP.NET Core, Authorization, Azure, C#, .NET 8, EF Core, JWT, Minimal APIs

Read this issue →

Overview of TLS with .NET Framework

https://www.c-sharpcorner.com/article/overview-of-tls-with-net-framework/

Featured in Issue #221 June 18, 2025

Issue also covered: Application Insights, ASP.NET Core, C#, .NET 9, .NET Framework, EF Core, GitHub Copilot, OpenAI

Read this issue →

Storing Passwords Securely in .NET: A Beginner-Friendly Guide to Hashing and Salting

https://medium.com/@startfromlocalhost/storing-passwords-securely-in-net-a-beginner-friendly-guide-to-hashing-and-salting-992be9088129

Featured in Issue #217 June 12, 2025

Issue also covered: ASP.NET Core, Authentication, Design Patterns, .NET 9, .NET Core, JWT, ML.NET, OAuth

Read this issue →

Generate RSA Public and Private Keys Using OpenSSL

https://www.c-sharpcorner.com/article/generate-rsa-public-and-private-keys-using-openssl/

Featured in Issue #216 June 09, 2025

Issue also covered: Application Insights, ASP.NET Core, Azure, C#, Design Patterns, .NET 10, .NET 8, .NET 9

Read this issue →

Protect Your Secrets in .NET : A Dev’s Guide to User Secrets

https://medium.com/@jfowe/protect-your-secrets-in-net-a-devs-guide-to-user-secrets-214c03e07709

Featured in Issue #211 June 04, 2025

Issue also covered: Azure, C#, Design Patterns, EF Core, .NET MAUI, OpenAI, Performance, SQL Server

Read this issue →

Why Blazor’s Scoped Services Broke My Multi-Tab Experience

https://visitkans.medium.com/why-blazors-scoped-services-broke-my-multi-tab-experience-cccd7a2b9583

Featured in Issue #209 June 02, 2025

Issue also covered: .NET Aspire, Azure, Blazor, C#, Design Patterns, .NET 9, EF Core, GitHub Copilot

Read this issue →

Oops, We Just Charged Everyone Twice!

https://medium.com/@michaelmaurice410/oops-we-just-charged-everyone-twice-e2acba35f8eb?source=rss------dotnet-5

Featured in Issue #207 May 29, 2025

Issue also covered: ASP.NET Core, Authentication, Azure, Blazor, CQRS, C#, Dapper, Design Patterns

Read this issue →

Best Practices for Reliable and Secure Error Responses in .NET

https://medium.com/@vikpoca/best-practices-for-reliable-and-secure-error-responses-in-net-f4b1eb6d8c58

Featured in Issue #206 May 28, 2025

Issue also covered: ASP.NET Core, Azure, C#, Design Patterns, .NET Core, EF Core, GitHub Copilot, Minimal APIs

Read this issue →

The Risks of Misconfigured CORS in Web Development

https://www.c-sharpcorner.com/blogs/the-risks-of-misconfigured-cors-in-web-development

Featured in Issue #203 May 23, 2025

Issue also covered: ASP.NET Core, C#, EF Core, GitHub Copilot, OpenAI, Performance, Source Generators

Read this issue →

Cybersecurity Vulnerability Types: A Guide for .NET Developers

https://medium.com/@Adem_Korkmaz/cybersecurity-vulnerability-types-a-guide-for-net-developers-74cb96c91383

Featured in Issue #201 May 21, 2025

Issue also covered: .NET Aspire, Authentication, Authorization, Azure, Azure DevOps, Blazor, C#, .NET 8

Read this issue →

Building a Multi-Tenant Data Platform on Azure: Architecting for Scale, Security, and Governance

https://medium.com/@mohsho10/building-a-multi-tenant-data-platform-on-azure-architecting-for-scale-security-and-governance-0bbafada8210

Featured in Issue #200 May 20, 2025

Issue also covered: ASP.NET Core, Azure, Design Patterns, .NET 9, .NET Core, .NET MAUI, Minimal APIs, Performance

Read this issue →

Stop Using FirstOrDefault for Claims in .NET

https://itnext.io/stop-using-firstordefault-for-claims-in-net-71add18db5a2

Featured in Issue #198 May 16, 2025

Issue also covered: Azure, Azure Functions, C#, .NET 10, .NET 9, Performance, Solid Principles, Source Generators

Read this issue →

Secure .NET 8 Web APIs in 2025: JWT, CORS & Cookies

https://medium.com/@karthikns999/secure-dotnet8-webapi-security-jwt-cors-cookies-2025-3688ba32cfb3

Featured in Issue #195 May 13, 2025

Issue also covered: ASP.NET Core, .NET Aspire, Blazor, C#, .NET 9, EF Core, JWT, OpenAI

Read this issue →

Building Zero-Trust Architectures with C# Services

https://www.c-sharpcorner.com/article/building-zero-trust-architectures-with-c-sharp-services/

Featured in Issue #192 May 08, 2025

Issue also covered: ASP.NET Core, Azure, Clean Architecture, C#, Event Sourcing, Performance, REST API

Read this issue →

How to Restrict Pages using Middleware and PageFilters

https://www.danylkoweb.com/Blog/how-to-restrict-pages-using-middleware-and-pagefilters-UG

Featured in Issue #191 May 07, 2025

Issue also covered: ASP.NET Core, Azure, Azure DevOps, Azure Functions, Cosmos DB, C#, Dapper, Design Patterns

Read this issue →

Azure AI Services Security Using Service Principal

https://logcorner.com/azure-ai-services-security-using-service-principal/

Featured in Issue #189 May 05, 2025

Issue also covered: ASP.NET Core, Authentication, Azure, Azure DevOps, .NET 10, .NET Framework, EF Core, gRPC

Read this issue →

# Implementing API Key Authentication with LSCoreAuthKey in .NET

https://medium.com/limitlesssoft/implementing-api-key-authentication-with-lscoreauthkey-in-net-8359137c6bc0

Featured in Issue #188 May 02, 2025

Issue also covered: ASP.NET Core, Azure, C#, Dapper, Design Patterns, Docker, EF Core, .NET MAUI

Read this issue →

Implementing TOTP (Time-Based One-Time Password) MFA in .NET Core

https://www.c-sharpcorner.com/article/implementing-totp-time-based-one-time-password-mfa-in-net-core/

Featured in Issue #185 April 29, 2025

Issue also covered: ASP.NET Core, C#, Design Patterns, .NET 8, .NET 9, EF Core, GitHub Copilot, Performance

Read this issue →

10 Reasons Your .NET App Is Still at Risk in 2025 — How to Secure It

https://itnext.io/10-reasons-your-net-app-is-still-at-risk-in-2025-how-to-secure-it-efbaa229589d

Featured in Issue #183 April 25, 2025

Issue also covered: Azure, Blazor, C#, Design Patterns, .NET 10, .NET 9, .NET Core, .NET Framework

Read this issue →

Time Based OTP - Setup and Validation

https://www.c-sharpcorner.com/article/time-based-otp-setup-and-validation/

Featured in Issue #182 April 24, 2025

Issue also covered: ASP.NET Core, Blazor, .NET 9, .NET Core, .NET Framework, EF Core, GitHub Copilot, .NET MAUI

Read this issue →

AI isn’t Ready to Directly Replace Programmers (April 2025)

https://www.c-sharpcorner.com/article/ai-isnt-ready-to-directly-replace-programmers-april-2025/

Featured in Issue #179 April 21, 2025

Issue also covered: ASP.NET Core, C#, Design Patterns, .NET 10, MediatR, OpenAI, Performance

Read this issue →

Combatting Bot Attacks: Introducing NSCaptcha for Your .NET Applications

https://medium.com/@hussein.nakhostin2000/combatting-bot-attacks-introducing-nscaptcha-for-your-net-applications-72518e7837f1

Featured in Issue #171 April 09, 2025

Issue also covered: ASP.NET Core, C#, .NET 8, .NET 9, GitHub, SQL Server, Visual Studio

Read this issue →

Improve performance and security using Standard Load Balancer and Standard SKU public IP addresses in Azure DevTest Labs

https://devblogs.microsoft.com/develop-from-the-cloud/improve-performance-and-security-using-standard-load-balancer-and-standard-sku-public-ip-addresses-in-azure-devtest-labs/

Featured in Issue #168 April 04, 2025

Issue also covered: .NET Aspire, Azure, Azure DevOps, C#, Domain-Driven Design, Docker, .NET 9, .NET Core

Read this issue →

Swagger Security in .NET 8 API

https://medium.com/c-sharp-programming/swagger-security-in-net-8-api-e67e8fb48037?source=rss------dotnet-5

Featured in Issue #167 April 03, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, C#, GitHub Copilot, .NET MAUI, Minimal APIs, MongoDB

Read this issue →

Overview of advanced security in ASP.NET

https://medium.com/@joshi.vignesh/overview-of-advanced-security-in-asp-net-47128f068513

Featured in Issue #160 March 25, 2025

Issue also covered: ASP.NET Core, Azure DevOps, Benchmarking, Blazor, CQRS, C#, .NET 9, GitHub

Read this issue →

Beyond 500: Building Professional Error Handling for .NET APIs

https://www.csharp.com/article/beyond-500-building-professional-error-handling-for-net-apis/

Featured in Issue #159 March 24, 2025

Issue also covered: ASP.NET Core, Azure, Clean Architecture, C#, .NET Core, Event Sourcing, MediatR, Minimal APIs

Read this issue →

Secure Coding in .NET 9: Advanced Techniques for Modern Developers

https://medium.com/@Adem_Korkmaz/secure-coding-in-net-9-advanced-techniques-for-modern-developers-9c826cf9f18b

Featured in Issue #158 March 21, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, C#, GitHub Actions, OpenAI, Web API

Read this issue →

My First Nuget Package -Aadhaar Offline KYC Verification in .NET

https://medium.com/@hraverkar/my-first-nuget-package-aadhaar-offline-kyc-verification-in-net-b7fc00f92b36

Featured in Issue #155 March 18, 2025

Issue also covered: AOT, ASP.NET Core, Azure, Benchmarking, Blazor, Clean Architecture, C#, Docker

Read this issue →

C# Unsafe.As Secrets: Use It Wisely!

https://medium.com/@shamuddin/c-unsafe-as-secrets-use-it-wisely-a6ebc25a2d23

Featured in Issue #154 March 17, 2025

Issue also covered: AOT, Azure, Azure Functions, Blazor, C#, .NET 10, .NET 8, .NET 9

Read this issue →

Do you know the best way to secure API keys in an ASP.NET Core application?

https://medium.com/dot-net-sql-learning/do-you-know-the-best-way-to-secure-api-keys-in-an-asp-net-core-application-237ee9b1f7a6

Featured in Issue #153 March 14, 2025

Issue also covered: ASP.NET Core, Azure, Blazor, C#, Docker, .NET Core, EF Core, Event Sourcing

Read this issue →

Securing Medical Data in .NET Healthcare Apps Using Storage SDK

https://medium.com/bytehide/securing-medical-data-in-net-healthcare-apps-using-storage-sdk-3102fae0c6d0

Featured in Issue #151 March 12, 2025

Issue also covered: ASP.NET Core, Azure, C#, .NET Core, EF Core, GitHub Copilot, .NET MAUI, Performance

Read this issue →

Implement Phone verification, 2FA using ASP.NET Core Identity

https://damienbod.com/2025/03/03/implement-phone-verification-2fa-using-asp-net-core-identity/

Featured in Issue #149 March 10, 2025

Issue also covered: ASP.NET Core, Authentication, Azure, .NET 10, GitHub Copilot, Performance, Service Bus, Visual Studio

Read this issue →

Restoring a Private .NET NuGet Feed: Troubleshooting Unauthorized Access Errors

https://medium.marktinderholt.com/restoring-a-private-net-nuget-feed-troubleshooting-unauthorized-access-errors-962bb7f760a6

Featured in Issue #147 March 06, 2025

Issue also covered: ASP.NET Core, C#, .NET 10, .NET Core, EF Core, GitHub, Performance, SQL Server

Read this issue →

How to Encrypt the SQLite DB File using AES

https://www.csharp.com/article/how-to-encrypt-the-sqlite-db-file-using-aes/

Featured in Issue #143 February 28, 2025

Issue also covered: ASP.NET Core, AutoMapper, Azure, Blazor, C#, .NET 9, GitHub Copilot, gRPC

Read this issue →

Essential Security Practices for .NET Developers: A Comprehensive Guide

https://medium.com/@sevvalkatirci99/essential-security-practices-for-net-developers-a-comprehensive-guide-2119b216b2f1

Featured in Issue #140 February 25, 2025

Issue also covered: Azure, Azure DevOps, C#, .NET Core, EF Core, GitHub Copilot, Performance, Web API

Read this issue →

Building a Robust Password Validator in C#

https://medium.com/@davidsilwal/building-a-robust-password-validator-in-c-df27d46de99b

Featured in Issue #137 February 20, 2025

Issue also covered: ASP.NET Core, CQRS, C#, .NET Core, .NET Framework, EF Core, MediatR, ML.NET

Read this issue →

ASP.NET Core and Chunking HTTP Cookies

https://khalidabuhakmeh.com/aspnet-core-and-chunking-http-cookies

Featured in Issue #134 February 17, 2025

Issue also covered: AOT, ASP.NET Core, .NET Aspire, Benchmarking, Blazor, C#, .NET 10, .NET 8

Read this issue →

Related topics