Learn it from developers who built it.
Tutorials, how-tos and deep dives on AI, .NET, C#, cloud and developer tools, written by the community.
Learn how to review AI-generated C# and ASP.NET Core code for SQL injection, missing authorization, exposed secrets, unsafe inputs, and other security risks before merging.
Learn API key security practices from nRouter's shown-once key model, including secret storage, per-key budgets and limits, revocation, auditing, and authentication errors.
Learn how to interpret GitHub security scan results in pull requests, validate AI-assisted findings, trace risks, and decide which vulnerabilities must be fixed before merging.
Learn how to investigate the Zod 4.6.6 security alert by checking installed versions, lock files, Git dependencies, package provenance, and dependency history.
CodeQL 2.27.2 adds C++ regex parsing and improves security analysis, data-flow modeling, and framework support for Go, Rust, JavaScript, TypeScript, and C#.
Learn how CodeQL 2.27.2 models Comdb2 C API statement functions as SQL injection sinks, improving detection of unsafe query construction in C and C++ applications.
Learn how GitHub Secret Scanning detects Supabase and Pydantic tokens, and how to rotate exposed credentials, clean Git history, and use secure configuration.
Learn how GitHub CodeQL default setup pauses weekly scheduled scans for inactive repositories and how pushes or pull requests resume them.
GitHub is removing legacy SSH algorithms and raising RSA key requirements. Learn which algorithms to check, how to test clients, and what developers need to change.
Learn the difference between encryption and hashing, how they work, real-world examples, password security, and when to use each in simple terms.
Learn why AI coding agents need software supply-chain security controls like CI tools, including dependency checks, least privilege, sandboxing, secrets, and CI validation.
Learn how GitHub Copilot's local sandbox controls filesystem, network, and credential access, with practical commands to inspect and tighten permissions.
Learn how to implement HOTP and TOTP in C# for 2FA using Base32, HMAC, time-based codes, drift tolerance, secure storage, and rate limiting.
Learn how ASP.NET Core 11 device-bound sessions protect authentication cookies by binding login sessions to browser-specific cryptographic keys.
Learn how ASP.NET Core 11 authorization policy metadata can be shared across MVC, SignalR, and Blazor applications to create consistent security rules and policies.
Learn how GitHub Secret Protection helps detect and prevent exposed credentials before code is merged, improving secret security across development and CI/CD workflows.
A beginner-friendly, diagram-backed walkthrough of the seven core authentication concepts every developer should understand from Basic Auth and sessions to JWTs, OAuth2, and OpenID Connect/SSO with real system design diagrams and practical design considerations for each.
Build data residency controls for global AI workloads by managing geographic processing, data zones, model routing, latency, compliance requirements, and regional AI infrastructure.
Build a tamper-resistant NuGet supply chain using package signing to verify package authenticity, protect build integrity, and reduce software supply chain risks.
Learn how to design secure identity boundaries for AI agent tool calls using user identity, delegated permissions, authorization policies, and least-privilege access.
Learn how to audit AI-generated unsafe C# code by reviewing pointer lifetimes, buffer bounds, stackalloc usage, interop, and caller safety contracts.
Implement capability-based security for AI tool plugins to grant agents only necessary permissions, ensuring granular control and preventing privilege escalation.
Secure AI agents by treating third-party MCP tools as software dependencies, applying least privilege, and robust governance.
Secure AI workloads in ASP.NET Core with policy-based authorization. Learn to implement fine-grained access control for AI capabilities.
Learn how enterprise AI code audits evaluate AI-generated code for security, governance, software provenance, compliance, and production readiness.
Automate enterprise AI compliance with Policy-as-Code. Shift left security, enforce regulations, and accelerate safe AI deployments.
Secure AI tools with OAuth & MCP for fine-grained authorization, protecting enterprise data and operations.
Fix GitHub authentication errors on Windows caused by cached credentials. Learn to clear Windows Credential Manager for multiple accounts.
Master ASP.NET Core authentication: JWT vs Cookies vs OAuth 2.0. Choose the right strategy for security, scalability, and user experience.
Master OAuth 2.1 for ASP.NET Core APIs. Learn PKCE, JWT validation, refresh tokens, and best practices for secure API authentication.
Everything on Security, not only its articles: the Security page →
Write an article and earn +1,000 SHARP when it is approved.
Write an article
