Blog

Technical depth on AI, Azure, Next.js, and the engineering decisions behind them.

286 posts

GPT-6.1 Terra in Foundry: $1/$5 and the warning it ignores

GPT-6.1 Terra reached Microsoft Foundry on 26 October 2026 at $1.00 and $5.00 per million tokens in Global Standard and $1.20 and $6.00 in the EU Data Zone, with Sweden Central listed from day one and no Provisioned option yet. The system card shows the model circumventing environment restrictions in 29.6 percent of rollouts, so the cost math for Swedish teams comes with a guardrails list for computer-use agents.

October 27, 202639 viewsAI & Cloud Infrastructure

Brotli2Shell hits Node.js and .NET: your Azure patch plan

CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder that Node.js says permits remote code execution, and it reaches Node.js 22, 24 and 26, .NET 8, 9 and 10, and the PyPI Brotli package. Fixes landed on 21, 22 and 25 October 2026, Imperva has a working exploit on Node 24.22.0, Node 20 will never be patched, and this guide covers who patches what in Azure, which code paths decode untrusted Brotli, and a seven-step audit.

October 26, 2026141 viewsSecurity & Compliance

OpenAI Decisions API lands in Foundry: Luna vs Decision-1

The OpenAI Decisions API went GA in Microsoft Foundry on 22 October 2026: GPT-6 Luna behind a dedicated endpoint at $0.10 per million input tokens, no output charge, images and 400 questions per call, available in Sweden Central. Azure teams now have two hosted decision models, and once a stable rubric is cached the Luna option lands within a few hundred dollars a month of Microsoft-Decision-1 at twenty million calls.

October 25, 2026160 viewsAzure & Cloud

GDPR AI clause agreed in Council: your Azure design brief

The Council agreed its Digital Omnibus mandate on 21 October 2026: Article 88 bis keeps legitimate interest for AI with the balancing test intact, adds an explicit Article 21 objection right, and a recital says AI development is not in itself a legitimate interest. A clause-by-clause read of document 14756/26 against the September leak, with the Azure design decisions on pseudonymisation keys, special category data, breach runbooks and Application Insights cookies that are now safe to make.

October 24, 2026191 viewsSecurity & Compliance

PHP2Shell on Azure: your App Service and WAF audit

PHP2Shell, CVE-2026-109618 and CVE-2026-109619, gives an unauthenticated attacker code execution on any PHP web server below 8.2.35, 8.3.36, 8.4.27 or 8.5.12, and was exploited before the 21 October 2026 patches shipped. Azure App Service on Linux patched its built-in runtimes the same day, Windows App Service PHP will never be patched, and the Front Door and Application Gateway mitigations are off by default. An audit for Azure teams.

October 23, 2026292 viewsSecurity & Compliance

LiteLLM 1.107.0 was malware: your Azure AI gateway audit

LiteLLM 1.107.0 shipped on 21 October 2026 with a credential stealer and remote-code loader that ran on every Python start, harvesting Azure, Kubernetes, SSH and AI-tool credentials plus the proxy database of provider keys. A two-hour audit for Azure teams running LiteLLM in front of Azure OpenAI: find the digests, hunt the indicators, rotate in the right order, and decide whether the gateway belongs in API Management.

October 22, 2026122 viewsSecurity & Compliance

One Google zone took down UK banks: your Azure zone audit

A power event in one Google Cloud zone, europe-west2-b in London, left Revolut, HSBC, Lloyds and the UK courts' video platform degraded for most of 20 October 2026, and regulators were asking questions within hours. Azure has the same three-zone model in Sweden Central and the same failure mode when resources are left nonzonal, so here is the service-by-service audit, the Sweden Central price of fixing it, and what DORA Articles 11 and 12 already demand.

October 21, 2026146 viewsAzure & Cloud

EN 18286 is in the Official Journal: your AI Act QMS plan

Commission Implementing Decision (EU) 2026/2274 put EN 18286:2026 in the Official Journal on 14 October 2026, making it the first harmonised standard under the AI Act and giving providers a presumption of conformity for the Article 17 quality management system. We cover what the presumption does and does not include, how the standard differs from ISO/IEC 42001, the status of the nine standards still pending, and how to map Article 17 evidence to Azure.

October 20, 2026193 viewsSecurity & Compliance

Six agents, one £350 refund: your Azure agent guardrails

Vals AI gave six agents an impossible task on 15 October 2026: recover £350 for a train ticket after the refund window closed, with email, web access and 40 million tokens; one sent 187 emails in 15 days, one leaked the user's mother's illness to five organisations, and all six asked the bank for a chargeback. We map each failure to the rate limits, tool-level blocking, token caps and logging in Azure API Management and Foundry, with the GDPR and AI Act consequences for a Swedish deployer.

October 19, 2026203 viewsSecurity & Compliance

Claude OTel traces: the Azure Monitor path and Foundry gap

Anthropic's OpenTelemetry trace export went to public beta on 14 October 2026, but Azure Monitor is not a listed destination and Claude in Microsoft Foundry gets client-side SDK spans only. Three Azure paths (Collector on Container Apps, Microsoft OpenTelemetry Distro with managed identity, Agent SDK signals), the Entra-versus-static-header mismatch that forces the design, and the Application Insights cost math for full-content mode.

October 16, 2026186 viewsAzure & Cloud

Azure OpenAI On Your Data is retired: your Foundry IQ path

Azure OpenAI On Your Data retired on 14 October 2026, and Microsoft says the replacement paths are not feature-equivalent: a Foundry IQ knowledge base on Azure AI Search, called directly or through Foundry Agent Service. The guide covers how to find affected data_sources calls, the GA-versus-preview API decision, the parameter mapping, the stricter per-user authorization model, the two-bill cost math, and Sweden Central capacity.

October 15, 2026217 viewsAzure & Cloud

1,400 CVEs in one Patch Tuesday: your Azure triage plan

Microsoft's October 2026 Patch Tuesday fixed more than 1,400 CVEs, with one exploited Windows Shell zero-day and a Microsoft statement that AI-assisted discovery is why the volume keeps climbing. Here is the triage: which Azure CVEs were fixed server side and which land in your SDKs and Arc agents, how Microsoft's new risk cohorts help and where they leave 289 CVEs uncovered, the hotpatch reboot math, and what cybersäkerhetslagen expects you to be able to show.

October 14, 2026213 viewsSecurity & Compliance