Posts tagged "Security"

9 articles on AJ's Tech Notes tagged with Security.

  1. Human Approval for Agent Tools with Microsoft Agent Framework in .NET

    Require a human yes before an agent runs a risky tool in Microsoft Agent Framework. Tested numbers for approve and reject, and the local-function naming trap that made it look broken.

    By Ajith Joseph · Thu Nov 05 2026 · #dotnet #csharp #security #ai-agents

  2. Copilot Studio Model Changes: The OpenAI Sub-Processor Switch and What to Check in Your Tenant

    GPT-6 Astra and GPT-5.6 Terra are available in Copilot Studio only when OpenAI is enabled as a sub-processor. A governance checklist for agent owners and tenant admins.

    By Ajith Joseph · Wed Nov 04 2026 · #security #copilot-studio #governance #ai-agents

  3. Agents Need Identities, Not Shared API Keys: A Least-Privilege Playbook for 2026

    Survey data shows agent adoption outrunning security. How Entra Agent IDs, MCP auth changes, and a deny-by-default tool gate (tested C#) give AI agents least privilege.

    By Ajith Joseph · Tue Sep 29 2026 · #dotnet #security #authentication #copilot-studio #ai-agents

  4. Putting a Copilot Studio Agent in Front of Customers: A Secure React Embed

    Embed a Copilot Studio agent in a React customer portal securely: a .NET token broker, opaque session handles, safe context passing, and tools that cannot be prompt-injected.

    By Ajith Joseph · Thu Sep 24 2026 · #react #dotnet #security #copilot-studio #ai-agents

  5. Next.js 16 Security Deep Dive: Mitigating Prompt Injection and SSRF Risks

    Learn how to secure your Next.js 16 apps against prompt injection and SSRF attacks. Expert tips, code examples, and best practices included....

    By Ajith Joseph · Mon Jul 20 2026 · #security #nextjs #prompt-injection

  6. Patching .NET 10.0 in Production: Managing the April 2026 Remote Code Execution Vulnerabilities

    Learn how to patch .NET 10.0 in production to fix April 2026 RCE vulnerabilities. Step-by-step guide, best practices, and post-patching tips included....

    By Ajith Joseph · Tue May 19 2026 · #dotnet #security

  7. Handling Next.js 16 Security in Production: Mitigating SSRF and Middleware Bypasses

    Secure your Next.js 16 app in production! Learn actionable steps to mitigate SSRF attacks, middleware bypasses, and best practices for robust security....

    By Ajith Joseph · Fri May 15 2026 · #security #nextjs

  8. Securing .NET Core Applications: A Guide to Modern Authentication and Authorization Patterns

    Learn how to secure .NET Core apps with modern authentication & authorization patterns. Explore best practices, OIDC, JWT, and role-based access control....

    By Ajith Joseph · Sun Aug 24 2025 · #dotnet #security #authentication #aspnet-core

  9. Building Secure REST APIs with .NET Core

    Learn how to build secure and scalable REST APIs using .NET Core with JWT authentication and best practices

    By Ajith Joseph · Sun Mar 02 2025 · #dotnet #security #api-design