Loading
Security
OpenID Connect: Understanding state, nonce, and code_challenge
Learn how OpenID Connect state, nonce, and PKCE code_challenge protect authentication flows from CSRF, ID token replay, and authorization-code interception.
Quick takes from developers at work.
Tips, fixes and short write-ups on what developers ran into this week, in their own words.
Learn how OpenID Connect state, nonce, and PKCE code_challenge protect authentication flows from CSRF, ID token replay, and authorization-code interception.
Learn password hashing in C# with secure salts and PBKDF2, including password storage, verification, constant-time hash comparison, and protection against attacks.
Learn how Azure RBAC and Azure Policy work together to control access, enforce resource compliance, apply least privilege, and automate Azure security.
Secure Angular & .NET 10 apps with Auth Code + PKCE. Protects SPAs, Gateways, and APIs for robust enterprise security.
Customize authentication pages in Microsoft Entra External ID! Learn to configure page layouts, modify attribute labels, and reorder fields for a better user experience. Improve sign-up flows today!
This implementation provides a secure way to handle JWT authentication in ASP.NET Core while mitigating common security risks. By storing the JWT in an HTTP-only cookie, we protect against XSS attacks while still leveraging the benefits of JWT for stateless authentication. Remember to adapt this example to your specific requirements, especially regarding key management, token expiration, and additional security measures for production environments.
Learn how to schedule automatic daily database backups using Windows Task Scheduler. This step-by-step guide explains how to create backup scripts, configure scheduled tasks, and ensure your data is safe every day at a specified time.
In this blog, you will learn about the overview of the most common attacks carried out on APIs.
In this blog, you will learn about API security best practices.
In this blog, you will learn about JWT Authentication and Authorization.
In this blog, we are discussing Open Redirecting Vulnerability.
In this blog, we are discussing the importance of error handling in application security.
In this blog, you will learn about the user enumeration attack with examples.
In this blog, we are discussing the importance of Cryptography Application Security.
In this blog, we are discussing the application security while logging and auditing.
In this blog, you will learn about Anti-Frame busting – dismissing protection scripts.
This blog gives an overview of achieving authentication and authorization using identity providers for quick and easy integration. It focuses development rather than security, as it is done by a third party (IDP).
In this blog, we will discuss how a cookie becomes vulnerable when the HttpOnly attribute is not set especially when it contains sensitive information like SessionId.
Over the last several months, the media has repeatedly reported on the exploitations of cybercriminals using their malware to shut down equipment and networks or take data hostage with a ransom demand.
Digicert finishes acquisition of Symantec's SSL and related PKI solution business. Now the browser community distrusts Symantec SSL certificates and after 15th March 2018, your website with Symantec SSL will be shown as "Not Secure". Learn What should be your next step during this course of transition.
Any innovation when used thoughtfully, can be good for humans, but similarly when it falls into the wrong hands then it can be misused badly. So is the technology, it has become an inseparable part of our lives and certainly comes with hidden threats. This article highlights the need for awareness about information security and as a programmer or user, everyone has to put certain controls to restrict the misuse of data contained in a trusted system.
In this technology driven age, data is quite possibly one of the biggest assets that your company has, but more than that, has to protect and build data recovery strategy.
In this blog, you will learn why one should extend his SIEM Solution With Network Configuration Monitoring Tools.
Everything on Security, not only its blogs: the Security page →
Write a blog post and earn +250 SHARP when it is approved.
Write a blog
