ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
423 articles Updated Page 4 of 17
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 4 of 17
Newest first
-
Remove sign-up from Entra External ID user flows
damienbod.com Issue #445
This article shows how to remove the sign-up flow from Entra External ID user flows. This is required because SMS and Phone validation can be abused by bots to run up costs on the tenant. The bots cre...
-
Global Error Handling in ASP.NET Core Web API: Building Reliable, Secure, and Production-Ready APIs
achuchiwilliam.medium.com Issue #444
Modern backend systems are expected to be stable, predictable, and easy to maintain. Users may forgive a failed request, but they rarely…
-
On why devs from other languages find Authentication in .NET the most difficult part
medium.com Issue #444
A translator’s guide to .NET authentication, for developers coming from Node, Python, Ruby, or Go.
-
Fail Fast — for incorrect or missing configuration
medium.com Issue #444
In the .NET world, it’s common to store configuration such as connection strings, topic names, API keys, and log levels in configuration…
-
Securing the AI You’re Building: What the OWASP GenAI Data Security Guide Means for Developers Who…
pub.towardsai.net Issue #443
Most AI security articles are written by security professionals explaining risks to developers. Continue reading on Towards AI »
-
AI Security & Safety Protecting Your .NET AI Apps in 2026
medium.com Issue #443
“In 2025, a Fortune 500 company’s internal AI assistant was tricked — via a carefully crafted PDF a user uploaded — into revealing the…
-
JWT Authentication with .Introduction to NET To the layperson.
medium.com Issue #438
I have tried it now, so you need not.
-
Static Code Analysis in .NET: Open Source Tools That Actually Earn Their Place in Your Pipeline
fries-dotnet-legacy.medium.com Issue #434
How to combine free Roslyn analyzers for quality, style, and security — without drowning in warnings
-
-
Securing Back-end App Service Web Apps with Private Endpoints
markheath.net Issue #427
Service Endpoints (2019) Private Endpoints (2026) Scope Entire App Service Your specific app only Data exfiltration protection No Yes Public access Still reachable (blocked by rules) Blocked (access r...
-
Modernizing .NET — Part 17: Migrating SMTP Email to MailKit
medium.com Issue #425
Learn how to replace obsolete SmtpClient with MailKit for modern, secure, and cross-platform email delivery in .NET Core.
-
Preventing Overposting in ASP.NET Core JSON Patch APIs
derek-ji.medium.com Issue #425
A custom Model Binder that enforces field-level access control using annotations
-
Creating a Mock RDP Server in C#
donmahsu.medium.com Issue #424
script that simulates pretending to be an RDP server.
-
Understanding AI in the .NET
aindotnet.medium.com Issue #424
Many companies are interested in introducing artificial intelligence into their operations, but knowing where to start is often the…
-
How to Detect Phishing Links in Documents using C#/.NET
cloudmersive.medium.com Issue #424
The possibility of phishing links living in document containers often gets ignored. Unfortunately, it’s a very real threat.
-
Coding for Security with Chris Ayers
spreaker.com Issue #423
What does secure coding look like today? Carl and Richard talk to Chris Ayers about the MITRE ATT&CK matrix, a comprehensive breakdown of the tactics, techniques, and procedures black hats use to ...
-
-
AutoMapper's last free version has a security flaw
roundthecode.com Issue #422
AutoMapper v14 has a high-severity vulnerability. Learn what it means, how to reproduce it, and how to fix or avoid the issue in your apps. The page AutoMapper's last free version has a security flaw ...
-
How to Design a Multi-Tenant SaaS Platform on Microsoft Azure
feedly.com Issue #421
A practical guide to designing a secure, scalable multi-tenant SaaS architecture on Microsoft Azure, covering tenancy models, data isolation, Azure services, and real-world architectural consideration...
-
️ Custom Session Store for Complex Objects in ASP.NET Core
medium.com Issue #420
ASP.NET Core’s default session fails with complex objects. This post shows how to store them safely in memory.
-
Securing ASP.NET Core APIs with API Keys
c-sharpcorner.com Issue #420
Protect your ASP.NET Core APIs with API Keys! This guide explores 5 practical patterns, from simple middleware to database-backed solutions, complete with code examples.
-
How to Protect Web Applications from DDoS Attacks?
c-sharpcorner.com Issue #419
Shield your web applications from DDoS attacks! Learn practical strategies using CDNs, WAFs, rate limiting, and more to maintain performance and availability.
-
How to Secure REST APIs Using OAuth 2.0 and JWT Authentication?
c-sharpcorner.com Issue #418
Secure REST APIs with OAuth 2.0 and JWT. Learn authentication, authorization, and best practices for robust API security in modern web applications.
-
Minimal APIs, concurrency, and Copilot
DotNetNews Issue #416
This issue covers Minimal APIs, EF Core concurrency, GitHub Copilot modernization, security basics for APIs, and practical performance and GC guidance.
-
ASP.NET Core migration, performance and AI
DotNetNews Issue #415
Issue #415 covers WebHost-to-WebApplication migration, C# enum and nullable reference guidance, bulk DB updates, Copilot, Serilog, and Azure slot swaps.