ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
423 articles Updated
Start here
Editor picks for Security
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Passkeys keep moving from nice-to-have to baseline. Good starter piece for WebAuthn in ASP.NET Core.
-
OWASP Top 10 for .NET Developers - Part 8: Preventing Software and Data Integrity Failures
medium.com Issue #497
A worthwhile security reminder that clean scans and passing tests do not cover supply-chain and integrity failure risks.
-
Why and When We Need to Use [CustomAuthorize] in ASP.NET
masumkazi.medium.com Issue #497
Custom authorization is easy to overuse, so the "when" is the important part of this discussion.
-
How to Implement Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #491
Passkeys are moving from nice-to-have to expected. Useful if you want stronger auth without dragging users through password friction.
-
How Hidden Security Vulnerabilities Turn Into Business-Critical Incidents in Modern Applications
medium.com Issue #490
Less framework-specific, but the business framing around hidden vulnerabilities and incident cost is still relevant for engineering leads.
-
Elsa 3.8 Preview: Secrets, State Machines, and a Security Hardening Pass
topuzas.medium.com Issue #489
Worth a skim if Elsa is on your radar and you care about security posture.
-
Building for the agentic web with .NET 11
youtube.com Issue #472
Agentic web apps on .NET 11 shift from request-response to autonomous agent patterns.
-
Stop prompt injection from hijacking your agent, new security capabilities now released within Agent Framework
devblogs.microsoft.com Issue #465
Prompt injection is still the biggest agent risk, so I'm glad to see more concrete platform defenses landing here.
ASP.NET Core security from the DotNetNews archive, curated for .NET developers who already ship production code. This is a reading list pulled from daily issues, not a substitute for the official docs on ASP.NET Core and .NET Security.
Use Start here for the editorial shortlist, then browse Latest or the full archive when you need more depth. Coverage leans toward ASP.NET Core security, .NET security, secure coding C#. Recent pieces worth opening: “Password hashing done right: PBKDF2-SHA512, 600k iterations, timing-safe” and “Cross-service auth without a shared secret: JWKS dual-fetch”.
Every item links out to the original publisher and back to the DotNetNews issue where it ran.
Latest
Newest Security from the archive
- Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
-
Why Modern ASP.NET Core Web APIs Use JWT Instead of Sessionsajax-workspace.medium.com Issue #500
-
How to Secure APIs with OAuth 2.1 and OpenID Connectc-sharpcorner.com Issue #498
- Why and When We Need to Use [CustomAuthorize] in ASP.NET
masumkazi.medium.com Issue #497
Archive
Page 1 of 17
Newest first
-
Password hashing done right: PBKDF2-SHA512, 600k iterations, timing-safe
medium.com Issue #504
Storing a password is a solved problem, and almost every breach headline is someone who solved it the wrong way. Here are the four…
-
Cross-service auth without a shared secret: JWKS dual-fetch
medium.com Issue #502
When you split a monolith into services, the easy answer is to copy the JWT signing secret into every validator. That is also the answer…
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Implement secure, passwordless passkey authentication in ASP.NET Core. Leverage FIDO2 & WebAuthn for enhanced security and user experience.
-
How to Build an AI Coding Assistant with ASP.NET Core and Local LLMs
c-sharpcorner.com Issue #501
Build an AI coding assistant with ASP.NET Core and local LLMs for enhanced privacy, security, and cost control in your development workflow.
-
Why Modern ASP.NET Core Web APIs Use JWT Instead of Sessions
ajax-workspace.medium.com Issue #500
Modern applications are no longer limited to a single website. A business may have an Angular application, a mobile app, an admin…
-
From Pentest to 1.7 Million Downloads, Part 2: The Lessons Nobody Taught Me
dotnetcore.show Issue #499
Strategic Technology Consultation Services This episode of The Modern .NET Show is supported, in part, by RJJ Software's Strategic Technology Consultation Services . If you're an SME (Small to Medium ...
-
The Verification Layer Every AI Agent Needs (and How I Built One Twice)
topuzas.medium.com Issue #499
Introduction: The Day I Stopped Trusting My Own Agent
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Secure your APIs with OAuth 2.1 and OpenID Connect. Learn about authentication, authorization, JWTs, PKCE, and best practices for modern applications.
-
OWASP Top 10 for .NET Developers - Part 8: Preventing Software and Data Integrity Failures
medium.com Issue #497
You reviewed your payment API code. Your unit tests passed, your vulnerability scans are clean, and your API gateway security policies are…
-
Why and When We Need to Use [CustomAuthorize] in ASP.NET
masumkazi.medium.com Issue #497
Authorization is one of the most critical aspects of web application security. Building a feature is important, but ensuring that only the…
-
Why I Added an Audit Trail to Our Admin Panel (and the Gap I Almost Missed)
medium.com Issue #494
Our internal admin panel is the control room for a B2B SaaS product. Staff use it to manage subscriptions, feature flags, and user access…
-
OWASP Top 10 for .NET Developers - Part 6: Preventing Vulnerable and Outdated Components
medium.com Issue #492
Modern software development is no longer just about writing secure code. It’s about trusting code written by others. Every NuGet package…
-
Reconfigurable Authorization Policies in .NET
medium.com Issue #492
Should changing an authorization rule really require a deployment?
-
JWT Done Right: 15 Production Mistakes Every ASP.NET Core Developer Should Avoid (.NET 9 Guide)
medium.com Issue #492
Fifteen JWT mistakes in ASP.NET Core APIs: validation, refresh tokens, key rotation, revocation, and the controls that must sit beside a…
-
How to Implement Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #491
Implement secure passkey authentication in ASP.NET Core apps. Enhance security & user experience with WebAuthn & FIDO2.
-
AI Assisted Live Coding Best Practices and Code Security Guardrails
c-sharpcorner.com Issue #491
Discover essential best practices for secure AI-assisted code generation. Learn how to implement defensive prompting, risk mitigation guardrails, and validation frameworks during automated live coding...
-
How Hidden Security Vulnerabilities Turn Into Business-Critical Incidents in Modern Applications
medium.com Issue #490
Security is a board-level concern. IBM’s latest breach report puts the global average cost at $4.4 million per incident ($10.22 million in… Continue reading on Emerline Tech Talk »
-
AI Security Testing: How to Validate Prompts, Models, and Tool Calls
c-sharpcorner.com Issue #489
Secure your AI systems! Learn to validate prompts, models, and tool calls for LLMs, RAG, and agents in .NET.
-
Elsa 3.8 Preview: Secrets, State Machines, and a Security Hardening Pass
topuzas.medium.com Issue #489
A hands-on early look at what’s changed and what it signals about where this .NET workflow engine is heading.
-
Secure Coding Practices — Writing Code That Doesn’t Break
medium.com Issue #489
Turning Threat Model Findings into Secure Implementation
-
Implementing AI-Based Dependency Risk Analysis in Large .NET Solutions
c-sharpcorner.com Issue #489
Leverage AI for .NET dependency risk analysis. Proactively manage vulnerabilities, predict issues, and optimize large solutions with ASP.NET Core.
-
Building Enterprise AI Decision Audit Systems Using .NET
c-sharpcorner.com Issue #489
Build enterprise AI decision audit systems with .NET. Ensure transparency, accountability, and compliance for AI-driven decisions.
-
Building AI-Powered Software Dependency Intelligence with .NET
c-sharpcorner.com Issue #488
Leverage .NET and AI for intelligent software dependency management, enhancing security, reliability, and developer productivity.
-
A Customer Got Charged Three Times. The Scary Part? My Code Worked Exactly as Written.
medium.com Issue #488
No exception. No crash. No bug in the logs. The code did precisely what I told it to. And a customer’s card got hit three times for the…
-
Building AI-Powered Application Configuration Advisors with .NET
c-sharpcorner.com Issue #487
Build AI-powered application configuration advisors with .NET to proactively identify risks, optimize settings, and enhance security for improved reliability.