security
ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
483 articles Updated Page 6 of 20
Browse additional ASP.NET Core and .NET Security articles from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 6 of 20
Newest first
-
Why not have changes in API behavior depend on the SDK you link against?
devblogs.microsoft.com Issue #456
Some time ago, I noted that the CoInitializeSecurity function demands an absolute security descriptor, even though many functions in Windows produce self-relat
-
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
azure.microsoft.com Issue #455
As cloud workloads become more agentic and AI systems handle increasingly sensitive data, trust must be engineered directly into infrastructure. Azure Integrated HSM brings hardware‑enforced key prote...
-
OWASP Top 10 for .NET Developers - Part 1: Preventing Broken Access Control
medium.com Issue #454
Broken Access Control is ranked as the #1 security risk in the OWASP Top 10 because improperly enforced authorization allows attackers to…
-
🚀 Integrating Hangfire into .NET 9 Applications
c-sharpcorner.com Issue #448
Master background task management in .NET 9 with Hangfire! This tutorial covers setup, job creation, security, monitoring, and best practices for reliable background processing.
-
CVE-2026-40372: ASP.NET Core Privilege Escalation
news.google.com Issue #447
CVE-2026-40372: ASP.NET Core Privilege Escalation
-
.NET 10.0.7 Out-of-Band Security Update
devblogs.microsoft.com Issue #446
We are releasing .NET 10.0.7 as an out-of-band (OOB) update to address a security issue introduced in Microsoft.AspNetCore.DataProtection Security update details This release includes a fix for
-
Obfuscator: Code Virtualization
medium.com Issue #446
A practical guide to protecting .NET applications
-
Another crash caused by uninstaller code injection into Explorer
devblogs.microsoft.com Issue #446
Some time ago, I noted that any sufficiently advanced uninstaller is indistinguishable from malware.¹ During one of our regular debugging chats, a colleague of mine mentione
-
Serving Media from Azure Blob Storage in ASP.NET Core : Downloads, Streaming and Secure Tickets
medium.com Issue #445
Azure Blob Storage is one of those services that quietly underpins a huge number of production systems. It’s where your audio recordings…
-
The simplest way to secure a Minimal API (With Swagger)
roundthecode.com Issue #445
Secure your .NET Minimal API quickly using API key authentication, with full Swagger support for testing and protecting endpoints. The page The simplest way to secure a Minimal API (With Swagger) appe...
-
Remove sign-up from Entra External ID user flows
damienbod.com Issue #445
This article shows how to remove the sign-up flow from Entra External ID user flows. This is required because SMS and Phone validation can be abused by bots to run up costs on the tenant. The bots cre...
-
Global Error Handling in ASP.NET Core Web API: Building Reliable, Secure, and Production-Ready APIs
achuchiwilliam.medium.com Issue #444
Modern backend systems are expected to be stable, predictable, and easy to maintain. Users may forgive a failed request, but they rarely…
-
On why devs from other languages find Authentication in .NET the most difficult part
medium.com Issue #444
A translator’s guide to .NET authentication, for developers coming from Node, Python, Ruby, or Go.
-
Fail Fast — for incorrect or missing configuration
medium.com Issue #444
In the .NET world, it’s common to store configuration such as connection strings, topic names, API keys, and log levels in configuration…
-
Securing the AI You’re Building: What the OWASP GenAI Data Security Guide Means for Developers Who…
pub.towardsai.net Issue #443
Most AI security articles are written by security professionals explaining risks to developers. Continue reading on Towards AI »
-
AI Security & Safety Protecting Your .NET AI Apps in 2026
medium.com Issue #443
“In 2025, a Fortune 500 company’s internal AI assistant was tricked — via a carefully crafted PDF a user uploaded — into revealing the…
-
JWT Authentication with .Introduction to NET To the layperson.
medium.com Issue #438
I have tried it now, so you need not.
-
Static Code Analysis in .NET: Open Source Tools That Actually Earn Their Place in Your Pipeline
fries-dotnet-legacy.medium.com Issue #434
How to combine free Roslyn analyzers for quality, style, and security — without drowning in warnings
-
-
Securing Back-end App Service Web Apps with Private Endpoints
markheath.net Issue #427
Service Endpoints (2019) Private Endpoints (2026) Scope Entire App Service Your specific app only Data exfiltration protection No Yes Public access Still reachable (blocked by rules) Blocked (access r...
-
Modernizing .NET — Part 17: Migrating SMTP Email to MailKit
medium.com Issue #425
Learn how to replace obsolete SmtpClient with MailKit for modern, secure, and cross-platform email delivery in .NET Core.
-
Preventing Overposting in ASP.NET Core JSON Patch APIs
derek-ji.medium.com Issue #425
A custom Model Binder that enforces field-level access control using annotations
-
Creating a Mock RDP Server in C#
donmahsu.medium.com Issue #424
script that simulates pretending to be an RDP server.
-
Understanding AI in the .NET
aindotnet.medium.com Issue #424
Many companies are interested in introducing artificial intelligence into their operations, but knowing where to start is often the…
-
How to Detect Phishing Links in Documents using C#/.NET
cloudmersive.medium.com Issue #424
The possibility of phishing links living in document containers often gets ignored. Unfortunately, it’s a very real threat.