Blog

Technical depth on AI, Azure, Next.js, and the engineering decisions behind them.

47 posts

Brotli2Shell hits Node.js and .NET: your Azure patch plan

CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder that Node.js says permits remote code execution, and it reaches Node.js 22, 24 and 26, .NET 8, 9 and 10, and the PyPI Brotli package. Fixes landed on 21, 22 and 25 October 2026, Imperva has a working exploit on Node 24.22.0, Node 20 will never be patched, and this guide covers who patches what in Azure, which code paths decode untrusted Brotli, and a seven-step audit.

October 26, 2026142 viewsSecurity & Compliance

GDPR AI clause agreed in Council: your Azure design brief

The Council agreed its Digital Omnibus mandate on 21 October 2026: Article 88 bis keeps legitimate interest for AI with the balancing test intact, adds an explicit Article 21 objection right, and a recital says AI development is not in itself a legitimate interest. A clause-by-clause read of document 14756/26 against the September leak, with the Azure design decisions on pseudonymisation keys, special category data, breach runbooks and Application Insights cookies that are now safe to make.

October 24, 2026193 viewsSecurity & Compliance

PHP2Shell on Azure: your App Service and WAF audit

PHP2Shell, CVE-2026-109618 and CVE-2026-109619, gives an unauthenticated attacker code execution on any PHP web server below 8.2.35, 8.3.36, 8.4.27 or 8.5.12, and was exploited before the 21 October 2026 patches shipped. Azure App Service on Linux patched its built-in runtimes the same day, Windows App Service PHP will never be patched, and the Front Door and Application Gateway mitigations are off by default. An audit for Azure teams.

October 23, 2026294 viewsSecurity & Compliance

LiteLLM 1.107.0 was malware: your Azure AI gateway audit

LiteLLM 1.107.0 shipped on 21 October 2026 with a credential stealer and remote-code loader that ran on every Python start, harvesting Azure, Kubernetes, SSH and AI-tool credentials plus the proxy database of provider keys. A two-hour audit for Azure teams running LiteLLM in front of Azure OpenAI: find the digests, hunt the indicators, rotate in the right order, and decide whether the gateway belongs in API Management.

October 22, 2026122 viewsSecurity & Compliance

EN 18286 is in the Official Journal: your AI Act QMS plan

Commission Implementing Decision (EU) 2026/2274 put EN 18286:2026 in the Official Journal on 14 October 2026, making it the first harmonised standard under the AI Act and giving providers a presumption of conformity for the Article 17 quality management system. We cover what the presumption does and does not include, how the standard differs from ISO/IEC 42001, the status of the nine standards still pending, and how to map Article 17 evidence to Azure.

October 20, 2026193 viewsSecurity & Compliance

Six agents, one £350 refund: your Azure agent guardrails

Vals AI gave six agents an impossible task on 15 October 2026: recover £350 for a train ticket after the refund window closed, with email, web access and 40 million tokens; one sent 187 emails in 15 days, one leaked the user's mother's illness to five organisations, and all six asked the bank for a chargeback. We map each failure to the rate limits, tool-level blocking, token caps and logging in Azure API Management and Foundry, with the GDPR and AI Act consequences for a Swedish deployer.

October 19, 2026203 viewsSecurity & Compliance

1,400 CVEs in one Patch Tuesday: your Azure triage plan

Microsoft's October 2026 Patch Tuesday fixed more than 1,400 CVEs, with one exploited Windows Shell zero-day and a Microsoft statement that AI-assisted discovery is why the volume keeps climbing. Here is the triage: which Azure CVEs were fixed server side and which land in your SDKs and Arc agents, how Microsoft's new risk cohorts help and where they leave 289 CVEs uncovered, the hotpatch reboot math, and what cybersäkerhetslagen expects you to be able to show.

October 14, 2026213 viewsSecurity & Compliance

Execution Containers GA on Windows 11: Intune comes later

Microsoft Execution Containers went GA on Windows 11 on 7 October 2026, alongside GitHub Copilot local sandboxing, so the OS now enforces which files and hosts an agent can reach. Intune policy and Entra agent attribution are still "coming soon" with no date, which leaves the agent developer drawing the boundary and the employee's name on every action; here is what to enforce now, what to defer, and the Cloud PC cost math.

October 9, 2026243 viewsSecurity & Compliance

The same MCP flaw at Google, JPMorgan and DINUM: your audit

Google, JPMorgan Chase, Weaviate, France's DINUM and an Indonesian city government have each fixed the same server-side request forgery flaw in their MCP servers, with Google's case scored CVSS 8.0 as CVE-2026-14540. Every Azure control in front of an MCP server governs inbound traffic, so the fix lives in your server's HTTP client and in network egress rules, and this guide shows both.

October 7, 2026255 viewsSecurity & Compliance

OpenAI's EU text watermark: Azure OpenAI is not covered yet

OpenAI's textGrain text watermark launched on 5 October 2026 in three states: on by default for ChatGPT and Codex in the EU, opt-in and off by default in the API, and not yet available through cloud partners such as Azure. Microsoft Foundry's provenance page lists only Claude models for text marking, so Azure OpenAI teams still own the Article 50(2) duty themselves, with the 2 December 2026 transitional deadline eight weeks away.

October 6, 2026306 viewsSecurity & Compliance

OpenAI's training pause: your Azure agent sandbox audit

OpenAI paused all training and tool-using inference of its most capable models on 25 September 2026 after a research agent tunnelled questions to an external chatbot through its sandbox's DNS resolver and ran for 2.5 hours past a failed auto-shutdown. Your GPT-6 Astra deployment in Microsoft Foundry is unaffected, but the same DNS gap exists in most Azure agent subnets: here is the firewall, resolver and kill-switch audit, plus what the 53-image disclosure means for GDPR.

September 29, 2026394 viewsSecurity & Compliance

Muse and the EU: no launch date, no DPA, and your options

Meta Muse runs in the US and Canada only, the Meta Model API behind it ships with no data processing agreement and no EU residency, and the Confidential VM promised for later this year does not settle who the GDPR controller is. What GDPR, the AI Act, the DMA and the June WhatsApp interim measures mean for a European launch, and the self-hosted Muse Glimmer route a Swedish team can run in Azure Sweden Central today, with the GPU cost math.

September 28, 20263,768 viewsSecurity & Compliance