Articles
I’ve written several technical articles since 1997 for various blogs, websites, and magazines, both in English and in Italian. Here you can find a list of the most recent ones:
Confused Deputy: The Old Bug That AI Agents Keep Reintroducing
A category of vulnerability we aimed to eradicate is re-emerging with the rise of AI agents.
2026-09-22 
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Human-in-the-Loop Approval
Ensure your AI agent asks for your permission before performing a critical action.
2026-09-21
Authorization Terminology is a Mess: Let's Fix It
Clarify authorization terminology by separating six axes: administration, model, policy, information, decision, and enforcement.
2026-08-31
Building Secure AI Agents with Microsoft Agent Framework and Auth0: Sending Email with Token Vault
Allow your .NET AI agent to send emails on your behalf securely using the Auth0 Token Vault.
2026-08-19
Building Secure AI Agents with Microsoft Agent Framework and Auth0: RAG Filtering
Learn how to build a RAG system with Microsoft Agent Framework and protect it with Auth0 Fine-Grained Authorization.
2026-08-12
Building Secure AI Agents with Microsoft Agent Framework and Auth0: User Authentication
Learn how to add user authentication to an AI agent built with Microsoft Agent Framework and C#: the first step to secure it and the first part of a new article series.
2026-08-03
Everybody Wants to Be a Dev!
Does AI really make it possible for anyone to create apps? Can anyone really become a developer?
2026-07-19
The Art of Consent Management in the OAuth World
How to implement proper consent management to allow users to consciously authorize your applications.
2026-07-16
Want AI Agents That Don't Spill Secrets? Don't Give Them Secrets
Learn why putting secrets in tool schemas, system prompts, or skill prompts exposes them to the LLM and how to keep credentials in the deterministic layer instead.
2026-06-26