security
ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
447 articles Updated Page 2 of 18
Browse additional ASP.NET Core and .NET Security articles from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 2 of 18
Newest first
-
Cross-service auth without a shared secret: JWKS dual-fetch
medium.com Issue #502
When you split a monolith into services, the easy answer is to copy the JWT signing secret into every validator. That is also the answer…
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Implement secure, passwordless passkey authentication in ASP.NET Core. Leverage FIDO2 & WebAuthn for enhanced security and user experience.
-
How to Build an AI Coding Assistant with ASP.NET Core and Local LLMs
c-sharpcorner.com Issue #501
Build an AI coding assistant with ASP.NET Core and local LLMs for enhanced privacy, security, and cost control in your development workflow.
-
Why Modern ASP.NET Core Web APIs Use JWT Instead of Sessions
ajax-workspace.medium.com Issue #500
Modern applications are no longer limited to a single website. A business may have an Angular application, a mobile app, an admin…
-
From Pentest to 1.7 Million Downloads, Part 2: The Lessons Nobody Taught Me
dotnetcore.show Issue #499
Strategic Technology Consultation Services This episode of The Modern .NET Show is supported, in part, by RJJ Software's Strategic Technology Consultation Services . If you're an SME (Small to Medium ...
-
The Verification Layer Every AI Agent Needs (and How I Built One Twice)
topuzas.medium.com Issue #499
Introduction: The Day I Stopped Trusting My Own Agent
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Secure your APIs with OAuth 2.1 and OpenID Connect. Learn about authentication, authorization, JWTs, PKCE, and best practices for modern applications.
-
OWASP Top 10 for .NET Developers - Part 8: Preventing Software and Data Integrity Failures
medium.com Issue #497
You reviewed your payment API code. Your unit tests passed, your vulnerability scans are clean, and your API gateway security policies are…
-
Why and When We Need to Use [CustomAuthorize] in ASP.NET
masumkazi.medium.com Issue #497
Authorization is one of the most critical aspects of web application security. Building a feature is important, but ensuring that only the…
-
Why I Added an Audit Trail to Our Admin Panel (and the Gap I Almost Missed)
medium.com Issue #494
Our internal admin panel is the control room for a B2B SaaS product. Staff use it to manage subscriptions, feature flags, and user access…
-
OWASP Top 10 for .NET Developers - Part 6: Preventing Vulnerable and Outdated Components
medium.com Issue #492
Modern software development is no longer just about writing secure code. It’s about trusting code written by others. Every NuGet package…
-
Reconfigurable Authorization Policies in .NET
medium.com Issue #492
Should changing an authorization rule really require a deployment?
-
JWT Done Right: 15 Production Mistakes Every ASP.NET Core Developer Should Avoid (.NET 9 Guide)
medium.com Issue #492
Fifteen JWT mistakes in ASP.NET Core APIs: validation, refresh tokens, key rotation, revocation, and the controls that must sit beside a…
-
How to Implement Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #491
Implement secure passkey authentication in ASP.NET Core apps. Enhance security & user experience with WebAuthn & FIDO2.
-
AI Assisted Live Coding Best Practices and Code Security Guardrails
c-sharpcorner.com Issue #491
Discover essential best practices for secure AI-assisted code generation. Learn how to implement defensive prompting, risk mitigation guardrails, and validation frameworks during automated live coding...
-
How Hidden Security Vulnerabilities Turn Into Business-Critical Incidents in Modern Applications
medium.com Issue #490
Security is a board-level concern. IBM’s latest breach report puts the global average cost at $4.4 million per incident ($10.22 million in… Continue reading on Emerline Tech Talk »
-
AI Security Testing: How to Validate Prompts, Models, and Tool Calls
c-sharpcorner.com Issue #489
Secure your AI systems! Learn to validate prompts, models, and tool calls for LLMs, RAG, and agents in .NET.
-
Elsa 3.8 Preview: Secrets, State Machines, and a Security Hardening Pass
topuzas.medium.com Issue #489
A hands-on early look at what’s changed and what it signals about where this .NET workflow engine is heading.
-
Secure Coding Practices — Writing Code That Doesn’t Break
medium.com Issue #489
Turning Threat Model Findings into Secure Implementation
-
Implementing AI-Based Dependency Risk Analysis in Large .NET Solutions
c-sharpcorner.com Issue #489
Leverage AI for .NET dependency risk analysis. Proactively manage vulnerabilities, predict issues, and optimize large solutions with ASP.NET Core.
-
Building Enterprise AI Decision Audit Systems Using .NET
c-sharpcorner.com Issue #489
Build enterprise AI decision audit systems with .NET. Ensure transparency, accountability, and compliance for AI-driven decisions.
-
Building AI-Powered Software Dependency Intelligence with .NET
c-sharpcorner.com Issue #488
Leverage .NET and AI for intelligent software dependency management, enhancing security, reliability, and developer productivity.
-
A Customer Got Charged Three Times. The Scary Part? My Code Worked Exactly as Written.
medium.com Issue #488
No exception. No crash. No bug in the logs. The code did precisely what I told it to. And a customer’s card got hit three times for the…
-
Building AI-Powered Application Configuration Advisors with .NET
c-sharpcorner.com Issue #487
Build AI-powered application configuration advisors with .NET to proactively identify risks, optimize settings, and enhance security for improved reliability.
-
Building AI-Powered Compliance Monitoring Platforms with .NET
c-sharpcorner.com Issue #487
Build AI-powered .NET compliance monitoring platforms for proactive risk detection, automated audits, and continuous regulatory adherence.