AI & MLIntermediate
Azure OpenAI and Microsoft Foundry for .NET Developers
Use Azure OpenAI in Microsoft Foundry (formerly Azure AI Foundry) from .NET: deployments, keyless auth, guardrails, quotas, PTUs, Agent Service and cost.
Security
42 articles about Security: in-depth .NET and AI guides, senior interview questions and AI news on DotNet AI Hub.
Technologies 17
AI & MLIntermediate
Responsible AI and LLM Security for .NET Applications
Secure LLM apps in .NET: OWASP Top 10 for LLMs 2026, prompt injection defenses, Prompt Shields, PII redaction, output checks, least privilege and the EU AI Act.
ASP.NET CoreAdvanced
Output Caching, HybridCache and Rate Limiting in ASP.NET Core
Speed up and protect ASP.NET Core apps with output caching, HybridCache L1/L2 caching and rate limiting: policies, tags, Redis, partitions and 429s.
ASP.NET CoreIntermediate
ASP.NET Core Middleware: Build and Order Your Pipeline
Master ASP.NET Core middleware: the RequestDelegate pipeline, Use, Run, Map and UseWhen, correct ordering, custom and IMiddleware components, errors and tests.
ASP.NET CoreBeginner
Razor Pages vs MVC: Server-Rendered Web Apps in ASP.NET Core
Razor Pages vs MVC in ASP.NET Core: page models, controllers, tag helpers, view components, validation, antiforgery, htmx and when to choose Blazor SSR.
Cloud-NativeIntermediate
Containerizing .NET Applications: Docker Best Practices
Build small, secure .NET 10 container images with multi-stage Dockerfiles, SDK container publishing, chiseled base images, non-root users and scanning.
Data & EF CoreIntermediate
Dapper and ADO.NET: High-Performance Data Access in .NET
Learn when to go below EF Core with ADO.NET and Dapper: readers, pooling, multi-mapping, safe parameters, transactions, Dapper.AOT and SqlBulkCopy.
Platform & RuntimeIntermediate
.NET Generic Host: Configuration, Options and Logging
A practical guide to the .NET Generic Host: configuration providers and precedence, validated strongly typed options, and structured high-performance logging.
SecurityIntermediate
Authentication in ASP.NET Core: Cookies, JWT and OpenID Connect
A practical guide to ASP.NET Core authentication: schemes and handlers, cookies, JWT bearer validation, OpenID Connect with Entra ID, and the BFF pattern.
SecurityIntermediate
Authorization in ASP.NET Core: Roles, Claims, Policies and Resource-Based Access
Learn ASP.NET Core authorization in depth, covering roles, claims, policy requirements and handlers, resource-based checks, permissions and testing.
SecurityAdvanced
Cryptography and Data Protection in .NET
A practical guide to cryptography in .NET, covering the Data Protection API, password hashing, AesGcm, RSA/ECDsa and post-quantum APIs.
SecurityIntermediate
ASP.NET Core Identity vs Entra ID vs External IdPs: Choosing an Identity Stack
Compare ASP.NET Core Identity, Microsoft Entra ID, Duende IdentityServer, OpenIddict, Keycloak, Auth0 and Okta to pick an identity stack.
SecurityIntermediate
OWASP Top 10 for .NET Developers
A code-first tour of the OWASP Top 10:2025 risks, with concrete ASP.NET Core, EF Core and C# mitigations for access control, injection and more.
SecurityBeginner
Secrets Management in .NET: User Secrets, Key Vault and Managed Identity
How to keep credentials out of .NET source control using user secrets, Azure Key Vault, managed identity, workload identity and rotation.
Testing & DevOpsIntermediate
CI/CD for .NET with GitHub Actions and Azure DevOps
Build production-ready .NET CI/CD pipelines with GitHub Actions and Azure Pipelines: caching, matrix builds, containers, OIDC and approvals.
Testing & DevOpsIntermediate
Creating and Publishing NuGet Packages the Right Way
Publish high-quality NuGet packages: metadata, SemVer, SourceLink, deterministic builds, trusted publishing, NuGet Audit and package signing.
Desktop & MobileIntermediate
Blazor Hybrid: Web UI in Native .NET Apps
Learn Blazor Hybrid and BlazorWebView in .NET MAUI, WPF and Windows Forms: sharing Razor class libraries, native APIs, security and performance.
Interview Questions 12
ASP.NET CoreArchitect
API Gateway and Backend-for-Frontend (BFF) Interview Questions
Architect interview questions on API gateway responsibilities, YARP vs Azure API Management, BFF token security, aggregation and avoiding a gateway monolith.
ASP.NET CoreSenior
Configuration, Options and Feature Flags Interview Questions
Senior ASP.NET Core interview questions on configuration precedence, IOptions vs IOptionsSnapshot vs IOptionsMonitor, validation, secrets and feature flags.
Cloud & DevOpsSenior
Infrastructure as Code Interview Questions for Senior .NET Engineers
Ten senior-level interview questions on Bicep, Terraform and Pulumi covering state, modules, drift detection, policy as code and testing IaC.
Data & EF CoreSenior
ADO.NET and Dapper Interview Questions
Senior .NET interview questions on ADO.NET and Dapper covering connection pooling, DataReader streaming, SqlBulkCopy, multi-mapping and SQL injection.
PerformanceSenior
JSON Serialization Performance Interview Questions in .NET
Senior .NET interview questions on System.Text.Json vs Newtonsoft.Json, source generation, polymorphic types, streaming and untrusted-input security.
SecurityArchitect
API Security Interview Questions for .NET Architects
Architect-level .NET interview questions on the OWASP API Security Top 10, rate limiting, input validation, mass assignment, CORS, mTLS and API keys vs tokens.
SecuritySenior
Cryptography and Secrets Management Interview Questions
Senior .NET interview questions on hashing vs encryption, password storage, Key Vault, HSMs, rotation, Data Protection, TLS and post-quantum crypto.
SecurityArchitect
Identity Architecture and Zero Trust Interview Questions
Ten architect-level interview questions on Microsoft Entra ID, managed identities, workload identity federation, conditional access and Zero Trust design.
SecuritySenior
OAuth 2.0, OpenID Connect and JWT Interview Questions
Ten senior .NET interview questions on OAuth 2.0 PKCE, client credentials, JWT validation, refresh token rotation, BFF token storage and OAuth 2.1.
SecuritySenior
Secure Coding and OWASP Interview Questions for .NET
Ten senior .NET interview questions on OWASP Top 10 risks: injection, XSS, CSRF, SSRF, insecure deserialization, broken access control and STRIDE.
SecurityLead
Software Supply Chain Security Interview Questions
Lead-level .NET interview questions on NuGet Audit, lock files, source mapping, SBOMs, package signing, SLSA, repo secrets and hardening CI/CD pipelines.
System DesignArchitect
System Design Interview: Payment Processing System in .NET
Senior .NET system design interview questions on payment systems: idempotency, double-entry ledgers, PSP integration, webhooks, sagas and PCI DSS scope.
AI News 13
Anthropic: Claude Models Breached Real Systems in Cyber Evaluations
Anthropic disclosed that Claude models hacked real organizations during misconfigured cyber evaluations. What happened and the lessons for AI agent builders.
MCP 2026-07-28 Specification Goes Stateless, Adds Extensions Framework
The MCP 2026-07-28 specification, released July 28, 2026, drops protocol sessions for a stateless core and adds Multi Round-Trip Requests and extensions.
Google Spots First Zero-Day Exploit It Believes Was Built With AI
Google's threat intelligence group found criminals preparing mass exploitation with a zero-day exploit it believes AI helped build. Key lessons.
Semantic Kernel Flaws Turned Prompt Injection Into Remote Code Execution
Microsoft detailed two critical Semantic Kernel flaws, including one in the .NET SDK, that let prompt injection reach code execution. How to check and fix them.
Anthropic Launches Claude Managed Agents, a Hosted Runtime for AI Agents
Anthropic put Claude Managed Agents into public beta on April 8, 2026, a hosted agent runtime with sandboxes, long-running sessions and credential vaults.
Anthropic Launches Project Glasswing With Unreleased Claude Mythos Preview
Anthropic withheld Claude Mythos Preview over its hacking skills and gave it to cyber defenders in Project Glasswing. What it means for patching.
A2A Protocol Reaches v1.0 With Signed Agent Cards and Multi-Tenancy
The Agent2Agent (A2A) protocol shipped v1.0 on March 12, 2026, adding signed Agent Cards, multi-tenancy and formal bindings, plus breaking changes.
OpenClaw One-Click RCE Flaw Puts Self-Hosted AI Agent Security in Focus
A one-click RCE flaw in the viral OpenClaw agent, plus malicious skills, showed the risks of self-hosted AI agents. What happened and how to run agents safely.
MCP Apps Launches as the First Official MCP Extension for Interactive UI
MCP Apps, launched on January 26, 2026 as the first official MCP extension, lets tools return interactive UIs that render in Claude, ChatGPT, VS Code and goose.
Anthropic Says It Disrupted an AI-Orchestrated Cyber Espionage Campaign
Anthropic says a state-sponsored group used Claude Code to automate most of an espionage campaign against 30 targets. What happened and what to do.
Whisper Leak: Microsoft Finds Encrypted LLM Streams Can Reveal Chat Topics
Microsoft's Whisper Leak research shows encrypted, streamed LLM responses can reveal conversation topics through packet sizes and timing. Key facts and fixes.
MCP Registry Launches in Preview as an Open Catalog of MCP Servers
The MCP project launched the MCP Registry in preview on September 8, 2025, an open catalog and API for public MCP servers, with NuGet among its package types.
Claude in Chrome Pilot Reveals Prompt Injection Risks of Browser Agents
Anthropic piloted Claude in Chrome and published prompt injection test results for browser agents. What the numbers show and how developers should respond.