security
ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
504 articles Updated Page 3 of 21
Browse additional ASP.NET Core and .NET Security articles from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 3 of 21
Newest first
-
Building MCP Servers with ASP.NET Core for Enterprise AI Agents
c-sharpcorner.com Issue #517
Build AI-ready enterprise agents with ASP.NET Core and MCP. Standardize tool discovery, reduce integration complexity, and enhance security.
-
Soft-delete vs the right to erasure: the GDPR conflict and the erasure pathway
medium.com Issue #517
Soft-delete is the right default for lifecycle and audit.
-
Content Security Policy in ASP.NET Core
c-sharpcorner.com Issue #516
Learn how to implement Content Security Policy (CSP) in ASP.NET Core to prevent XSS attacks by controlling resource loading.
-
Common Mistakes in Manual SQL Database Recovery - Know What Not To Do
c-sharpcorner.com Issue #516
Avoid common SQL database recovery mistakes. Learn best practices for manual recovery, when to use specialized tools, and prevent data loss.
-
Azure Key Vault Integration in .NET: Configuration Binding vs. SecretClient
c-sharpcorner.com Issue #515
Securely integrate Azure Key Vault in .NET using Configuration Binding or SecretClient. Choose the best approach for your app's needs.
-
Automatic CSRF protection based on Fetch Metadata headers
andrewlock.net Issue #515
In this post I describe the new Cross-Site Request Forgery protection added to ASP.NET Core that uses Fetch Metadata HTTP headers instead of antiforgery tokens
-
Understanding the Role of Microsoft Entra ID in Microsoft Intune
c-sharpcorner.com Issue #515
Discover how Microsoft Entra ID powers Intune for secure device management, user authentication, and policy enforcement for your organization.
-
Generate Secure and Configurable Passwords in .NET with PasswordPolicy
medium.com Issue #514
A lightweight .NET library for cryptographically secure password generation, custom password policies, validation, entropy checks, and…
-
Building Production-Ready Rate Limiting in ASP.NET Core 10
c-sharpcorner.com Issue #513
Master ASP.NET Core 10 rate limiting for production. Learn strategies, policies, and best practices to protect your APIs from abuse and traffic spikes.
-
One rotating refresh token, and reuse detection that makes theft self-limiting
medium.com Issue #513
A stateless JWT you cannot revoke has to be short-lived, which forces a refresh token, which is a long-lived bearer credential that can be…
-
Secure File Uploads in ASP.NET Core: Validation, Storage, and Best Practices
c-sharpcorner.com Issue #513
Master secure file uploads in ASP.NET Core. Learn validation, storage, and best practices to prevent security risks and ensure robust applications.
-
Secure Secrets Management in ASP.NET Core: User Secrets, Azure Key Vault, and Production Best Practices
c-sharpcorner.com Issue #512
Secure ASP.NET Core secrets with User Secrets, Azure Key Vault, and best practices. Protect your app from development to production.
-
Device Code Flow: The Gift That Keeps on Giving — To Attackers
techcommunity.microsoft.com Issue #512
PENDING REVIEW: MICROSOFT ARTICLE UNRETRIEVABLE (HTTP 403). Tags: Microsoft Entra ID, Conditional Access, Device Code Flow, OAuth, Azure Arc, Azure Migrate, Identity Security, Zero Trust Introduction ...
-
Building Secure File Upload APIs in ASP.NET Core 10
c-sharpcorner.com Issue #512
Build secure ASP.NET Core file upload APIs. Learn validation, size limits, safe storage, and best practices to prevent vulnerabilities.
-
API Gateway Patterns in ASP.NET Core with YARP: Routing, Security, and Load Balancing
c-sharpcorner.com Issue #512
Build production-ready API Gateways in ASP.NET Core with YARP for routing, security, load balancing, and scalable microservices.
-
Prioritize exposure resolution with a new dashboard experience (public preview)
techcommunity.microsoft.com Issue #512
PENDING REVIEW: MICROSOFT ARTICLE UNRETRIEVABLE (HTTP 403). Cut Through the Noise and Focus on What Matters Most Security teams face a constant challenge: too many findings, too many dashboards, and n...
-
Debugging .NET “Broken Pipe” SSL Errors on macOS
medium.com Issue #512
One of the more frustrating .NET errors on macOS is:
-
AI Governance and Autonomous AI Agent Governance: From Controlling Models to Governing Digital Actors - Human-in-the-Loop Is Not Enough
c-sharpcorner.com Issue #512
AI governance evolves from model control to governing autonomous digital actors, emphasizing identity, authorization, and accountability for responsible operations.
-
How Nationwide stays ahead of attackers with Project Perception
techcommunity.microsoft.com Issue #512
PENDING REVIEW: MICROSOFT ARTICLE UNRETRIEVABLE (HTTP 403). Nationwide, the world’s largest building society, is among the first organizations to put Microsoft’s new...
-
Rate Limiting in ASP.NET Core: Protecting APIs from Abuse and Traffic Spikes
c-sharpcorner.com Issue #511
Protect ASP.NET Core APIs from abuse & traffic spikes with built-in rate limiting. Implement policies for robust security & performance.
-
Secure Secrets Management in ASP.NET Core: User Secrets, Azure Key Vault, and Environment Variables
c-sharpcorner.com Issue #510
Secure your ASP.NET Core apps! Learn User Secrets, Azure Key Vault, & Env Vars for robust secrets management. Avoid breaches.
-
Understanding the Fetch Metadata HTTP headers: Sec-Fetch-Site and friends
andrewlock.net Issue #510
In this post I describe the Fetch Metadata HTTP headers like Sec-Fetch-Site and Sec-Fetch-Mode which give information to a server about the context of a request
-
MCP Security Best Practices: Authentication, Authorization, and Secure Tooling
c-sharpcorner.com Issue #509
Secure your .NET MCP implementations with best practices for authentication, authorization, and tool design to protect AI integrations and enterprise data.
-
Securing ASP.NET Core APIs with Microsoft Entra ID Authentication
c-sharpcorner.com Issue #508
Secure ASP.NET Core APIs with Microsoft Entra ID. Learn authentication, configuration, and best practices for robust API security.
-
GitHub Copilot Enterprise Best Practices for .NET Teams
c-sharpcorner.com Issue #508
Unlock GitHub Copilot Enterprise for .NET teams! Master best practices for AI-assisted coding, ensuring quality, security, and maintainability.