ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
423 articles Updated Page 3 of 17
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 3 of 17
Newest first
-
Agent Governance Toolkit for .NET:
medium.com Issue #469
A few months ago, most conversations around AI agents focused on one thing:
-
Microsoft wants safer C# without turning it into Rust
news.google.com Issue #469
Microsoft wants safer C# without turning it into Rust
-
Improving C# Memory Safety: Why Modern .NET Is Quietly Becoming More Secure
towardsdev.com Issue #469
A few years ago, whenever developers talked about “memory safety,” the conversation usually centered around languages like: Continue reading on Towards Dev »
-
OWASP Top 10 for .NET Developers -Part 3: Preventing Injection Attacks
medium.com Issue #469
Modern web applications process enormous amounts of user-controlled data every second - login credentials, search queries, transaction…
-
OpenTelemetry Logs, Fast APIs, Agent Memory
DotNetNews Issue #468
Covers Serilog-style OpenTelemetry logging, 1M req/min API design, MAUI Material 3, Agent Framework memory, and ASP.NET Core subfolder hosting.
-
Architecting for Zero Trust & Fiscal Sanity: Securing and Caching .NET 8 AI Agents on AWS
naved-shaikh.medium.com Issue #466
Picture this: You’ve successfully migrated your legacy enterprise applications into a modern microservices architecture running on AWS EKS…
-
Microsoft is tightening restrictions on the use of unsafe code in C#
news.google.com Issue #466
Microsoft is tightening restrictions on the use of unsafe code in C#
-
AWS Bedrock with .NET: Guardrails for Safe AI Applications
medium.com Issue #465
The Problem: An AI With No Boundaries
-
Stop prompt injection from hijacking your agent, new security capabilities now released within Agent Framework
devblogs.microsoft.com Issue #465
Prompt injection is the #1 risk on the OWASP LLM Top 10, and most agents in production today defend against it with one of two heuristics: a defensive system prompt, or a hand-rolled allowlist. Neithe...
-
Improving C# Memory Safety
devblogs.microsoft.com Issue #464
We're in the process of significantly improving memory safety in C#. The unsafe keyword is being redesigned to inform callers that they have obligations that must be discharged to maintain safety, doc...
-
How .NET Developers Build Secure and Scalable Enterprise Applications
medium.com Issue #464
Enterprise software development really needs this rare mix of performance and security, but also maintainability, and long-term platform…
-
Announcing Agent Governance Toolkit MCP Extensions for .NET
devblogs.microsoft.com Issue #462
Announcing a Public Preview .NET package that adds policy enforcement, startup tool scanning, fallback governance, and response sanitization to MCP servers with a single builder extension. The post A...
-
Microsoft SQL Security Across the MAESTRO Stack: Building Secure Agentic AI with Defense-in-Depth
devblogs.microsoft.com Issue #459
Artificial Intelligence is evolving rapidly. What began as simple prompt-and-response systems is now transforming into fully autonomous, agentic AI architectures capable of reasoning, orchestrating to...
-
Securing Swagger, Scalar, and Health Endpoints in ASP.NET
medium.com Issue #459
🚨 Your API Might Be Secure… But Your Swagger UI Isn’t
-
.NET and .NET Framework May 2026 servicing releases updates
devblogs.microsoft.com Issue #458
Welcome to our combined .NET servicing updates for May 2026. Let's get into the latest release of .NET & .NET Framework, here is a quick overview of what's new in our servicing releases: Security ...
-
Why not have changes in API behavior depend on the SDK you link against?
devblogs.microsoft.com Issue #456
Some time ago, I noted that the CoInitializeSecurity function demands an absolute security descriptor, even though many functions in Windows produce self-relat
-
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
azure.microsoft.com Issue #455
As cloud workloads become more agentic and AI systems handle increasingly sensitive data, trust must be engineered directly into infrastructure. Azure Integrated HSM brings hardware‑enforced key prote...
-
OWASP Top 10 for .NET Developers - Part 1: Preventing Broken Access Control
medium.com Issue #454
Broken Access Control is ranked as the #1 security risk in the OWASP Top 10 because improperly enforced authorization allows attackers to…
-
🚀 Integrating Hangfire into .NET 9 Applications
c-sharpcorner.com Issue #448
Master background task management in .NET 9 with Hangfire! This tutorial covers setup, job creation, security, monitoring, and best practices for reliable background processing.
-
CVE-2026-40372: ASP.NET Core Privilege Escalation
news.google.com Issue #447
CVE-2026-40372: ASP.NET Core Privilege Escalation
-
.NET 10.0.7 Out-of-Band Security Update
devblogs.microsoft.com Issue #446
We are releasing .NET 10.0.7 as an out-of-band (OOB) update to address a security issue introduced in Microsoft.AspNetCore.DataProtection Security update details This release includes a fix for
-
Obfuscator: Code Virtualization
medium.com Issue #446
A practical guide to protecting .NET applications
-
Another crash caused by uninstaller code injection into Explorer
devblogs.microsoft.com Issue #446
Some time ago, I noted that any sufficiently advanced uninstaller is indistinguishable from malware.¹ During one of our regular debugging chats, a colleague of mine mentione
-
Serving Media from Azure Blob Storage in ASP.NET Core : Downloads, Streaming and Secure Tickets
medium.com Issue #445
Azure Blob Storage is one of those services that quietly underpins a huge number of production systems. It’s where your audio recordings…
-
The simplest way to secure a Minimal API (With Swagger)
roundthecode.com Issue #445
Secure your .NET Minimal API quickly using API key authentication, with full Swagger support for testing and protecting endpoints. The page The simplest way to secure a Minimal API (With Swagger) appe...