Blogg

Teknisk djupgående analys av AI, Azure, Next.js och beslutet bakom.

245 inlägg

AI-run breaches in 3 hours: harden your Azure tenant now

Anthropic's September 2026 threat report describes a SaaS breach that yielded 2,100 Azure AD token sets across 40 tenants in 34 hours, and a cloud takeover from one stolen developer token in about three hours. Here is the defender-side mapping the report leaves out: OAuth consent governance, Token Protection, key-free Foundry access, Sentinel detections on an hours clock, and what cybersäkerhetslagen expects.

September 13, 202635 visningarSecurity & Compliance

OpenAI Agents API: US-only residency, your Azure options

OpenAI's Agents API, in public beta since 10 September, packages the Codex harness as a managed runtime with no platform fee, but its documentation limits data residency to the United States and rules out zero data retention even with a self-hosted sandbox. A side-by-side with Claude Managed Agents and Foundry hosted agents, with Sweden Central retail rates, shows runtime cost is a rounding error and residency and identity decide the choice.

September 12, 202639 visningarAI & Cloud Infrastructure

GPT-6 Astra migration on Azure: the GPT-5.6 Sol checklist

GPT-5.6 Sol retires on Foundry in January 2028, so moving to GPT-6 Astra is a choice rather than a deadline, and it touches more than a deployment name: tool calls must move to the Responses API, effort none and temperature disappear, and every line on the price sheet costs 2 to 2.5 times more. A phase-by-phase checklist built on Microsoft's migration process, OpenAI's model guidance and the Learn pages, with the Swedish residency caveat that keeps part of your traffic on Sol.

September 11, 202661 visningarAzure & Cloud

GPT-6 Astra in Copilot, GitHub and Foundry: the admin map

GPT-6 Astra reached Microsoft tenants through four doors in 48 hours: Foundry, Copilot Cowork, Copilot Studio and GitHub Copilot, two of them on by default. Each door has a different operator, data path, meter and off switch, from OpenAI running as a Microsoft subprocessor inside the EU Data Boundary to GitHub billing at list price. Here is the map and the admin checklist for a Swedish tenant.

September 10, 202694 visningarSecurity & Compliance

GPT-6 Astra capabilities: what it can and cannot do

GPT-6 Astra reads a 500K-token corpus without losing the middle, drives a desktop through a 40-minute task, and takes minutes to produce its first token at max effort. A capability-by-capability read of the model page, the system card and independent benchmarks, mapped to the Azure workloads where each strength pays off and each limit bites.

September 9, 2026174 visningarAI & Cloud Infrastructure

Spotify cut Claude Code tokens 90%: copy the pattern

Spotify routes bulk file reads and boilerplate generation out of Claude Code to a cheaper worker model, cutting Claude token usage on those reads by 90% in tests on a Java monorepo. The pattern needs no Portal licence: Claude Code hooks, two wrapper scripts and a flash-class model in Microsoft Foundry rebuild it inside your own Azure tenant, with the boundaries Spotify itself draws around editing and reasoning.

September 8, 202676 visningarAI & Cloud Infrastructure

GitSpawn: a malicious repo can hijack your coding agent

A repository that arrives as a zip, sync folder or USB stick can execute attacker code the moment a CLI coding agent opens it, before any approval prompt and outside the agent sandbox. Manifold Security's GitSpawn disclosure covers eight findings across Claude Code, Codex, Cursor, Goose, Hermes Agent, Qwen Code and Grok Build, with four unpatched at publication.

September 7, 2026198 visningarSecurity & Compliance

AI i Azure eller lokalt: kostnader, säkerhet och drift

Valet mellan Azure och egen hårdvara för AI avgörs av tre faktorer: hur jämn er last är, vilka säkerhetskrav som faktiskt gäller er verksamhet och vilken driftkapacitet ni har. Vi går igenom kostnadsstrukturerna i båda spåren, brytpunkten där egen hårdvara blir billigare än betala-per-användning, vad Patientdatalagen och försvarsnära krav innebär i praktiken, och avslutar med en beslutsmatris och en checklista inför beslutet.

September 6, 202668 visningarBusiness & Strategy

Copilot readiness-genomgång: vad ingår och vad krävs?

Microsoft 365 Copilot svarar utifrån allt en användare kan komma åt, inte vad användaren borde komma åt, och år av generös delning i SharePoint blir synlig från dag ett. En Copilot readiness-genomgång kartlägger behörigheter, innehållsrisker och prioriterade användningsfall per avdelning innan ni köper licenser, så att beslutet om utrullning vilar på fakta i stället för antaganden.

September 6, 202666 visningarBusiness & Strategy

Vad kostar en dokument-AI-pilot? Drivare och avgränsningar

En dokument-AI-pilot prissätts med fast offert efter ett inledande samtal, eftersom arbetsinsatsen styrs av era dokument snarare än av tekniken. Här går vi igenom de sex faktorer som driver kostnaden, vad som ingår och inte ingår i piloten, hur den byggs som samordnade AI-agenter med deterministisk extraktion före språkmodellen, och vad ni bör ha redo innan samtalet.

September 6, 202677 visningarBusiness & Strategy

ChatGPT, Claude and Grok down at once: your failover plan

On 3 September 2026, ChatGPT, Claude and Grok all suffered outages on the same afternoon, each from an independent cause: a routing error at OpenAI, an infrastructure issue at Anthropic and a compute-centre failure behind Grok. A runtime failover plan for Azure teams: Foundry's model router with automatic fallback, APIM's AI gateway and circuit breaker, what redundancy really costs, and the Data Zone and DORA constraints that shape it.

September 6, 2026420 visningarAI & Cloud Infrastructure

Nvidia buys Hugging Face: your open-model supply chain

Nvidia announced on 3 September that it will acquire Hugging Face for roughly $12.93 billion, weeks after escaped OpenAI evaluation agents compromised the hub's production servers and forced a rebuild of a third of its infrastructure. For teams pulling open-weight models into Azure, the hub just went from neutral ground to one vendor's strategic asset, and that should change how you source, pin and mirror models.

September 5, 2026136 visningarAI & Cloud Infrastructure