security
ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
504 articles Updated Page 7 of 21
Browse additional ASP.NET Core and .NET Security articles from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 7 of 21
Newest first
-
CVE-2026-40372: ASP.NET Core Privilege Escalation
news.google.com Issue #447
CVE-2026-40372: ASP.NET Core Privilege Escalation
-
.NET 10.0.7 Out-of-Band Security Update
devblogs.microsoft.com Issue #446
We are releasing .NET 10.0.7 as an out-of-band (OOB) update to address a security issue introduced in Microsoft.AspNetCore.DataProtection Security update details This release includes a fix for
-
Obfuscator: Code Virtualization
medium.com Issue #446
A practical guide to protecting .NET applications
-
Another crash caused by uninstaller code injection into Explorer
devblogs.microsoft.com Issue #446
Some time ago, I noted that any sufficiently advanced uninstaller is indistinguishable from malware.¹ During one of our regular debugging chats, a colleague of mine mentione
-
Serving Media from Azure Blob Storage in ASP.NET Core : Downloads, Streaming and Secure Tickets
medium.com Issue #445
Azure Blob Storage is one of those services that quietly underpins a huge number of production systems. It’s where your audio recordings…
-
The simplest way to secure a Minimal API (With Swagger)
roundthecode.com Issue #445
Secure your .NET Minimal API quickly using API key authentication, with full Swagger support for testing and protecting endpoints. The page The simplest way to secure a Minimal API (With Swagger) appe...
-
Remove sign-up from Entra External ID user flows
damienbod.com Issue #445
This article shows how to remove the sign-up flow from Entra External ID user flows. This is required because SMS and Phone validation can be abused by bots to run up costs on the tenant. The bots cre...
-
Global Error Handling in ASP.NET Core Web API: Building Reliable, Secure, and Production-Ready APIs
achuchiwilliam.medium.com Issue #444
Modern backend systems are expected to be stable, predictable, and easy to maintain. Users may forgive a failed request, but they rarely…
-
On why devs from other languages find Authentication in .NET the most difficult part
medium.com Issue #444
A translator’s guide to .NET authentication, for developers coming from Node, Python, Ruby, or Go.
-
Fail Fast — for incorrect or missing configuration
medium.com Issue #444
In the .NET world, it’s common to store configuration such as connection strings, topic names, API keys, and log levels in configuration…
-
Securing the AI You’re Building: What the OWASP GenAI Data Security Guide Means for Developers Who…
pub.towardsai.net Issue #443
Most AI security articles are written by security professionals explaining risks to developers. Continue reading on Towards AI »
-
AI Security & Safety Protecting Your .NET AI Apps in 2026
medium.com Issue #443
“In 2025, a Fortune 500 company’s internal AI assistant was tricked — via a carefully crafted PDF a user uploaded — into revealing the…
-
JWT Authentication with .Introduction to NET To the layperson.
medium.com Issue #438
I have tried it now, so you need not.
-
Static Code Analysis in .NET: Open Source Tools That Actually Earn Their Place in Your Pipeline
fries-dotnet-legacy.medium.com Issue #434
How to combine free Roslyn analyzers for quality, style, and security — without drowning in warnings
-
-
Securing Back-end App Service Web Apps with Private Endpoints
markheath.net Issue #427
Service Endpoints (2019) Private Endpoints (2026) Scope Entire App Service Your specific app only Data exfiltration protection No Yes Public access Still reachable (blocked by rules) Blocked (access r...
-
Modernizing .NET — Part 17: Migrating SMTP Email to MailKit
medium.com Issue #425
Learn how to replace obsolete SmtpClient with MailKit for modern, secure, and cross-platform email delivery in .NET Core.
-
Preventing Overposting in ASP.NET Core JSON Patch APIs
derek-ji.medium.com Issue #425
A custom Model Binder that enforces field-level access control using annotations
-
Creating a Mock RDP Server in C#
donmahsu.medium.com Issue #424
script that simulates pretending to be an RDP server.
-
Understanding AI in the .NET
aindotnet.medium.com Issue #424
Many companies are interested in introducing artificial intelligence into their operations, but knowing where to start is often the…
-
How to Detect Phishing Links in Documents using C#/.NET
cloudmersive.medium.com Issue #424
The possibility of phishing links living in document containers often gets ignored. Unfortunately, it’s a very real threat.
-
Coding for Security with Chris Ayers
spreaker.com Issue #423
What does secure coding look like today? Carl and Richard talk to Chris Ayers about the MITRE ATT&CK matrix, a comprehensive breakdown of the tactics, techniques, and procedures black hats use to ...
-
-
AutoMapper's last free version has a security flaw
roundthecode.com Issue #422
AutoMapper v14 has a high-severity vulnerability. Learn what it means, how to reproduce it, and how to fix or avoid the issue in your apps. The page AutoMapper's last free version has a security flaw ...
-
How to Design a Multi-Tenant SaaS Platform on Microsoft Azure
feedly.com Issue #421
A practical guide to designing a secure, scalable multi-tenant SaaS architecture on Microsoft Azure, covering tenancy models, data isolation, Azure services, and real-world architectural consideration...