[{"data":1,"prerenderedAt":1459},["ShallowReactive",2],{"sc:header-data-sv":3,"sc:footer-data-sv":489,"post-sv--posts-2026-03-20-stryker-attack-intune-privilege-13fd48e22fe471":519,"authors_data":879,"content-sv-list-7b291c2dd91a4":1233,"authors_data:Jan Geisbauer":1453},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"sv":13},{"title":14,"url":15,"alt":16},"Hem","/sv","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"sv":21},{"title":22,"description":23},"Workplace","Microsoft 365-driven för smarta, säkra och flexibla arbetsmiljöer som förenar den senaste tekniken och identitetslösningar.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"sv":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"sv":34},{"title":35,"url":36},"Managed Intune","/sv/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"sv":40},{"title":41,"url":42},"Managed Entra","/sv/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"sv":46},{"title":47,"url":48},"Managed Workplace","/sv/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"sv":52},{"title":53,"url":54},"Consulting Services","/sv/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"sv":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"sv":64},{"title":65,"url":66},"Microsoft Entra Suite","/sv/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"sv":70},{"title":71,"url":72},"Microsoft Intune","/sv/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"sv":76},{"title":77,"url":78},"Microsoft Windows","/sv/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"sv":82},{"title":83,"url":84},"Windows 365 Cloud PC","/sv/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"sv":88},{"title":89,"url":90},"Cloud Workplace Foundation","/sv/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"sv":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"sv":100},{"title":101,"url":102},"Microsoft 365 Copilot","/sv/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"sv":106},{"title":107,"url":108},"Teams","/sv/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"sv":112},{"title":113,"url":114},"SharePoint & Power Platform","/sv/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"sv":118},{"title":119,"url":120},"Exchange Online","/sv/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"sv":124},{"title":125,"url":126},"Information Protection & Compliance","/sv/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"sv":130},{"title":131,"description":132},"Azure","Driv tillväxt med Azure: Sänk molnkostnaderna, öka effektiviteten och driv innovation genom IaaS och PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"sv":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"sv":142},{"title":143,"url":144},"Azure Managed Services","/sv/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"sv":148},{"title":149,"url":150},"Azure Consulting","/sv/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"sv":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"sv":160},{"title":161,"url":162},"Planera ditt moln","/sv/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"sv":166},{"title":167,"url":168},"Migrera till molnet","/sv/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"sv":172},{"title":173,"url":174},"Förnya din verksamhet","/sv/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"sv":178},{"title":179,"url":180},"Ompröva din VMware-strategi","/sv/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"sv":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"sv":190},{"title":191,"url":192},"Azure Foundation","/sv/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"sv":196},{"title":197,"url":198},"Azure AI Foundation","/sv/azure/azure-ai-foundation",{"name":86,"languages":200},{"sv":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"sv":205},{"title":206,"url":207},"Azure Data Foundation","/sv/azure/azure-data-foundation",{"name":188,"languages":209},{"sv":210},{"title":211,"url":212},"Azure Container Foundation","/sv/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"sv":216},{"title":217,"url":218},"Managed Dark Tenant","/sv/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"sv":222},{"title":223,"url":224},"Cloud Adoption Framework","/sv/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"sv":228},{"title":229,"url":230},"Cloud Competence Center","/sv/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"sv":234},{"title":235,"description":236,"emergency":237},"Säkerhet","Vaksamhet i molnet med en prisbelönt managed service dygnet runt, incident response och toppmodernt skydd för din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Attackerad?","/sv/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"sv":249},{"title":250,"url":251},"Managed Red Tenant","/sv/security/managed-red-tenant",{"name":214,"languages":253},{"sv":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"sv":259},{"title":260,"url":261},"Sentinel Data Lake","/sv/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"sv":265},{"title":266,"url":267},"Security Consulting","/sv/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"sv":274},{"title":275,"url":276},"Cloud Security Operations Center","/sv/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"sv":280},{"title":281,"url":282},"Global Secure Access","/sv/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"sv":286},{"title":287,"url":288},"MyWorkID","/sv/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"sv":295},{"title":296,"url":297},"Preventive Services","/sv/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"sv":301},{"title":302,"url":303},"Data Security Service","/sv/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"sv":307},{"title":308,"url":309},"Security Copilot Agents","/sv/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"sv":313},{"title":314,"url":315},"Implementera NIS2","/sv/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"sv":319},{"title":320,"description":321},"Produkter","Innovativa kompletterande produkter för en helt säker, 100% cloud-native Microsoft-miljö som förbättrar samarbete, nätverksautentisering och programvaruhantering.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"sv":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Molnbaserad programvarudistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"sv":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution från molnet",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"sv":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbeta lokalt med dina Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"sv":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrera dina data från en server till en annan",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"sv":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider för Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"sv":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentisering för ditt nätverk",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"sv":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Hitta kontakter i Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"sv":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-övervakning i realtid",{"name":396,"languages":397},"casestudies",{"sv":398},{"title":399,"url":400,"description":401},"Kundcase","/sv/casestudies","Pionjär i molnet: Din främsta Microsoft-partner för heltäckande molnlösningar med ett Blueprint-baserat tillvägagångssätt och expertis inom Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"sv":405},{"title":406,"description":401},"Företag",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"sv":411},{"title":412},"Om oss",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"sv":417},{"title":418,"url":419},"Fakta och siffror","/sv/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"sv":423},{"title":424,"url":425},"Kontakt och platser","/sv/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"sv":429},{"title":430,"url":431},"glueckkanja Schweiz","/sv/company/switzerland",{"name":433,"languages":434},"austria",{"sv":435},{"title":436,"url":437},"glueckkanja Österrike","/sv/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"sv":441},{"title":442},"Karriär",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"sv":447},{"title":448,"url":449},"Karriäröversikt","/sv/career",{"name":451,"languages":452},"company-young-professionals",{"sv":453},{"title":454,"url":455},"Young Professionals","/sv/young-professionals",{"name":457,"languages":458},"company-jobs",{"sv":459},{"title":460,"url":461},"Lediga jobb","/sv/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"sv":465},{"title":466},"Aktuellt",[468,474],{"name":469,"languages":470},"company-blog",{"sv":471},{"title":472,"url":473},"Blogg","/sv/blog",{"name":469,"languages":475},{"sv":476},{"title":477,"url":478},"Event","/sv/events",[480],{"name":481,"languages":482},"career-meta",{"sv":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"sv":487},{"title":488,"url":425,"active":484},"Kontakt",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksSv":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Integritetspolicy","/sv/privacy",{"title":514,"url":515},"Juridisk information","/sv/imprint",{"title":517,"url":518},"Inga cookies","/sv/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":530,"eventid":494,"extension":785,"hideInRecent":484,"layout":786,"meta":787,"moment":791,"navigation":325,"path":872,"seo":873,"stem":874,"tags":875,"webcast":484,"__hash__":878},"content_sv/posts/2026-03-20-stryker-attack-intune-privilege.md","Ett adminkonto var allt som krävdes.",[523],"Jan Geisbauer",{"type":525,"value":526,"toc":770},"minimal",[527,531,534,539,542,545,548,552,554,557,560,563,566,570,572,575,578,582,584,587,590,593,597,599,602,609,614,617,624,627,630,633,640,643,650,661,665,667,673,676,686,689,692,695,698,701,704,708,710,713,716,719,727,730,733,737,739],[528,529,530],"p",{},"Onsdag den 11 mars 2026. Medarbetare på Strykers kontor i 79 länder slog på sina datorer och fann dem tomma. Inloggningsskärmar ersatta med en logotyp. Företagsdatorer, tjänstemobiler, privata enheter som var registrerade i företagets BYOD-program – alla raderade samtidigt, över natten. Ingen ransomware, inga signaturer för skadlig kod, ingenting som ett endpoint-detection-verktyg hade kunnat upptäcka.",[528,532,533],{},"Angriparen, en pro-iransk hacktivistgrupp vid namn Handala, hade gjort Strykers egen IT-hanteringsinfrastruktur till ett vapen.",[535,536,538],"h2",{"id":537},"vad-som-faktiskt-hände","Vad som faktiskt hände",[528,540,541],{},"{: .h3-font-size}",[528,543,544],{},"Kärnan i attacken var ingen avancerad exploit och ingen zero-day-sårbarhet, utan något långt enklare och långt vanligare: ett administratörskonto komprometterades, och det kontot hade åtkomst till Microsoft Intune.",[528,546,547],{},"Enligt rapporter från BleepingComputer raderades omkring 80 000 enheter mellan 05:00 och 08:00 UTC. Handala hävdade att siffran översteg 200 000, däribland servrar och mobila enheter i företagets globala verksamhet i 79 länder. En attack som utfördes uteslutande via en legitim hanteringskonsol.",[535,549,551],{"id":550},"varför-denna-attack-lyckades","Varför denna attack lyckades",[528,553,541],{},[528,555,556],{},"Det finns ett strukturellt problem i grunden av den här incidenten, som inte är specifikt för Stryker. Det gäller de flesta företag.",[528,558,559],{},"De flesta organisationer behandlar administrativa uppgifter och det dagliga arbetet som aktiviteter som utan problem kan samexistera på samma enhet under samma användaridentitet. En IT-administratör svarar på e-post, surfar på nätet, klickar ibland på en länk och hanterar från samma session, på samma enhet, molninfrastruktur, godkänner åtkomständringar eller vidrör, som i det här fallet, en enhetshanteringskonsol med behörighet att radera hela enhetsflottan.",[528,561,562],{},"Det är angreppsytan. När det dagliga arbetskontextet och det privilegierade administrationskontextet delar en gemensam endpoint och en gemensam identitet, är varje kompromettering av den endpointen automatiskt en kompromettering av allt som den identiteten kan nå. Phishing, credential-stöld via infostealer-skadlig kod, Adversary-in-the-Middle (AiTM) stöld av sessionstoken – allt detta blir en direkt väg till de mäktigaste kontrollerna i miljön. Ingen privilegie-eskalering krävs. Angriparen använder helt enkelt det som redan finns.",[528,564,565],{},"I Strykers fall omfattade den åtkomsten en Intune-tenant som hanterade enheter på sex kontinenter.",[535,567,569],{"id":568},"cisa-har-sett-nog","CISA har sett nog",[528,571,541],{},[528,573,574],{},"Attackens omfattning och fräckhet utlöste en ovanlig reaktion: CISA, den amerikanska Cybersecurity and Infrastructure Security Agency, publicerade riktlinjer som direkt adresserar risken med komprometterade enhetshanteringsplattformar. Myndigheten bekräftade att den kände till angreppsvektorn och uppmanade organisationer att vidta konkreta åtgärder – att säkerställa att högriskfunktioner i Intune, som radering av enheter, kräver godkännande från en andra administratör innan de körs.",[528,576,577],{},"Det är en sällsynt och betydelsefull signal. När en federal säkerhetsmyndighet ger ut riktade riktlinjer direkt efter en konkret incident är budskapet tydligt: det här är inget randfall. Det är ett mönster, och andra organisationer är med stor sannolikhet utsatta för samma risk.",[535,579,581],{"id":580},"separation-är-ingen-lyx-det-är-själva-kontrollen","Separation är ingen lyx. Det är själva kontrollen.",[528,583,541],{},[528,585,586],{},"Stryker-attacken visar med all önskvärd tydlighet vilken omfattning en platt privilegiemodell kan ha. Angriparen behövde inte eskalera privilegier genom en kedja av sårbarheter. Han fick åtkomst till inloggningsuppgifter eller en sessionstoken på en nivå och konstaterade att den nivån redan räckte för att orsaka katastrofal, global, oåterkallelig skada.",[528,588,589],{},"Det arkitektoniska svaret på detta problem har ett namn: Microsoft Enterprise Access Model (EAM). Dess kärnprincip är skiktad administration: privilegierade operationer utförs med dedikerade konton och dedikerade enheter, strikt åtskilda från det dagliga arbetskontextet. Denna least-privilege-ansats innebär att ett komprometterat produktivitetskonto inte kan nå hanteringsnivån och att ett komprometterat hanteringskonto inte kan utföra control-plane-operationer. Detta gäller lika mycket för rena molnmiljöer som för hybrida setup, inklusive on-premises-anslutning till Active Directory via Entra ID, där ett enda överprivilegierat konto fortfarande kan koppla ihop molnet och domänen.",[528,591,592],{},"Idén är enkel. Administrativt arbete sker på administrativa enheter. Identiteten som används för att hantera Microsoft 365-tenanten, Intune-miljön eller Azure-infrastrukturen är aldrig samma identitet som används för att läsa e-post eller delta i Teams-samtal. Enheten som används för dessa administrativa sessioner är härdad, begränsad och isolerad från vanligt webbsurfande och det produktivitetskontext som skapar angreppsytan. Lateral rörelse blir strukturellt svårare, eftersom det inte finns någon lateral väg.",[535,594,596],{"id":595},"två-försvarsnivåer","Två försvarsnivåer",[528,598,541],{},[528,600,601],{},"För att adressera denna hotmodell på rätt sätt måste man arbeta på två nivåer samtidigt: säkra vem som kan vidröra hanteringsnivån och dess inloggningsuppgifter, och härda hur den hanteringsnivån själv konfigureras och drivs. Det är inte samma problem, och båda är viktiga.",[528,603,604],{},[605,606],"img",{"alt":607,"src":608},"Risk- och produktmappning för Stryker-attackscenariot: Managed Red Tenant adresserar identitets- och åtkomstrisker, Managed Intune adresserar risker inom endpoint-hantering","https://res.cloudinary.com/c4a8/image/upload/v1774005366/blog/pics/stryker_risk_product_mapping.svg",[610,611,613],"h3",{"id":612},"managed-red-tenant-skydda-det-administrativa-kontextet","Managed Red Tenant: skydda det administrativa kontextet",[528,615,616],{},"{: .h4-font-size}",[528,618,619,620,623],{},"Den första nivån är fullständig isolering av den privilegierade åtkomsten. Det är vad vår ",[621,622,250],"a",{"href":251}," är utformad för.",[528,625,626],{},"Managed Red Tenant erbjuder en fullständigt isolerad, molnbaserad administrativ miljö – en dedikerad Microsoft Entra-tenant („den röda tenanten\"), som uteslutande används för privilegierade operationer. Administrativa identiteter bor här. Administrativa enheter hanteras här. Ingenting från den vanliga arbetsmiljön flödar över.",[528,628,629],{},"För de mest kritiska rollerna – de med control-plane-åtkomst, som globala administratörer – implementerar vi „Clean Keyboard\"-ansatsen: en fysisk Privileged Admin Workstation (PAW) med dedikerad hårdvara, härdade policyer och inga som helst beröringspunkter med det dagliga arbetskontextet. För administrativa roller under control plane erbjuder vi skalbara Virtual Access Workstations (VAW), byggda på en härdad Azure Virtual Desktop-infrastruktur inuti den röda tenanten. Själva åtkomstvägen skyddas av Microsoft Entra Private Access, med Zero Trust Network Access och Conditional Access-policyer innan en session kan upprättas.",[528,631,632],{},"Microsoft Entra Internet Access blockerar offentlig internetåtkomst från administrativa sessioner och begränsar anslutningarna strikt till privilegierade gränssnitt och auktoriserade tenant-miljöer. Återkallelse av sessioner i nära realtid är möjlig genom Universal Conditional Access Evaluation, vilket innebär att en återkallad credential inte kvarstår som en giltig session.",[528,634,635,636,639],{},"Managed Red Tenant övervakas dygnet runt av vårt ",[621,637,638],{"href":276},"Cloud Security Operations Center (CSOC)",", med särskilt utvecklade detektioner som är riktade mot administrativa behörigheter och åtkomstmönster. En angripare som på något sätt komprometterar en credential i den här miljön hade inte tre oupptäckta timmar på sig att köra wipe-kommandon över en global enhetsflotta.",[528,641,642],{},"Det är särskilt relevant för roller som Intune-administratörer. De vet hur man säkrar klienter, men att säkra en privilegierad admin-workstation kräver andra färdigheter: Enterprise Access Architecture, Identity Hardening, Zero Trust Controls. Dessa ligger typiskt hos säkerhetsteamet. En Managed Red Tenant tar bort den bördan helt: Intune-admins får en professionellt hanterad, konsekvent härdad workstation, utan att själva behöva bli experter på säkerhets-workstations. Det gäller varje högprivilegierad roll i organisationen.",[644,645],"video-frame",{"thumb":646,"alt":647,"id":648,":full-width":649},"/thumbs/thumb-managed-red-tenant.jpg","Jan Geisbauer och Thomas Naunheim diskuterar cybersäkerhetsstrategin för Managed Red Tenant","rOEIvItNkjE","true",[651,652,654,655],"div",{"style":653},"background:var(--color-gk-light-grey); margin-top:0.5rem; padding:0.5rem 1rem; font-size:0.85rem; color:var(--color-gk-dark-blue)","Mer på vår ",[621,656,660],{"href":657,"target":330,"rel":658},"https://www.youtube.com/playlist?list=PLPxBXiOFJRHelegu_B-uZAyz2UrOSxioL",[659],"noopener","YouTube-kanal",[610,662,664],{"id":663},"managed-intune-säkra-själva-hanteringsnivån","Managed Intune: säkra själva hanteringsnivån",[528,666,616],{},[528,668,669,670,672],{},"Den andra nivån är att säkerställa att Intune – verktyget som användes som vapen i Stryker-attacken – konfigureras, drivs och kontinuerligt underhålls enligt högsta säkerhetsstandard. Det är vad vår ",[621,671,35],{"href":36},"-tjänst ansvarar för.",[528,674,675],{},"En av de centrala insikterna från incidenter som denna är att organisationer ofta ärver Intune-miljöer som har vuxit organiskt: policyer staplade på policyer, manuella ändringar via portalen som är svåra att granska, och säkerhets-baselines som inte har hållit jämna steg med Microsofts egna, ständigt utvecklade rekommendationer. Det är precis den sortens miljö där konfigurationsdrift skapar utnyttjbara luckor.",[528,677,678,679,685],{},"Microsoft publicerade nyligen ",[621,680,684],{"href":681,"rel":682},"https://techcommunity.microsoft.com/blog/intunecustomersuccess/best-practices-for-securing-microsoft-intune/4502117",[683],"nofollow","Best Practices för att säkra Microsoft Intune"," – en signal om att även Microsoft betraktar Intune-härdning som ett ämne som kräver uttrycklig uppmärksamhet i hela branschen. Vår Managed Intune-tjänst bygger på dessa principer, och vi har implementerat Microsofts rekommendationer som en del av vår baseline.",[528,687,688],{},"Vår Managed Intune-tjänst bygger på glueckkanja Intune Foundation: en beprövad, kontinuerligt underhållen uppsättning best practices för enhetshantering, fullständigt tillhandahållen som kod med Terraform och vår egen TerraProvider. Varje ändring är automatiserad, versionshanterad och granskningsbar. Det finns inga odokumenterade click-through-konfigurationer som en angripare skulle kunna utnyttja genom att förstå glappet mellan det avsedda och det faktiskt satta.",[528,690,691],{},"Ur ett säkerhetsperspektiv innebär det att Zero Trust, App Protection Policies och Endpoint Security-konfigurationer tillämpas konsekvent by design – över Windows, macOS, iOS och Android – inte som engångsutrullningar, utan som kontinuerligt upprätthållna, löpande uppdaterade baselines som följer Microsofts egna säkerhetsriktlinjer.",[528,693,694],{},"Avgörande är att Managed Intune speglar den driftmässiga mognad som modern endpoint-hantering kräver: kontinuerlig compliance-övervakning, strukturerad ändringsstyrning och regelbundna service-reviews – inte som valfria extrafunktioner, utan som baseline-operationer. Men att säkra Intune-konfigurationen är bara halva jobbet. Om administratören som når konsolen gör det från en oskyddad enhet, förblir hanteringsnivån ändå exponerad – och det är precis här som Managed Red Tenant fullbordar modellen.",[528,696,697],{},"Eftersom alla konfigurationer tillhandahålls som kod på basis av Intune Foundation, tillämpar vi en strikt fyra-ögon-princip med peer review, ytterligare automatiserad validering och kontrollerade deployment-pipelines. Det eliminerar ohanterade portaländringar inom Intune Foundation och säkerställer en konsekvent, granskningsbar och säker baseline över alla enheter.",[528,699,700],{},"Den administrativa åtkomsten styrs av en least-privilege-modell med GDAP och Azure Lighthouse, med tydligt definierade ansvarsområden och snävt avgränsad åtkomst till kundtenanten. Det minskar avsevärt den angreppsyta som är förknippad med privilegierade operationer.",[528,702,703],{},"Åtgärder på enhetsnivå, inklusive destruktiva operationer, förblir kundens ansvar, eftersom deras utförande är nära knutet till organisationsspecifika processer och interna governance-ramverk. Microsoft och CISA rekommenderar att sådana åtgärder säkras med ytterligare skyddsåtgärder, exempelvis genom Multi-Admin-godkännandekontroller i Intune.",[535,705,707],{"id":706},"den-obekväma-frågan","Den obekväma frågan",[528,709,541],{},[528,711,712],{},"Stryker-attacken är ingen anklagelse mot Microsoft Intune. Intune betedde sig exakt som det var utformat att göra. Det körde de kommandon det tog emot från en autentiserad administratör. Felet låg inte i verktyget. Det låg i avsaknaden av kontroller över vem som kunde nå det verktyget, från vilket kontext och med vilken grad av auktorisering.",[528,714,715],{},"Det är ett governance- och arkitekturproblem. Och det är samma problem som finns i de flesta organisationer som driver Microsoft 365 idag.",[528,717,718],{},"Om dina administratörer når Intune, Entra ID eller Azure från samma enheter och identiteter som de använder för det dagliga arbetet – och om din Intune-miljö har vuxit fram genom år av manuella portaländringar i stället för genom en strukturerad, automatiserad driftmodell – bär du samma strukturella risk som Stryker bar den 11 mars. Frågan är om en angripare kommer att hitta den svagheten innan du stänger den.",[528,720,721,723,724,726],{},[621,722,250],{"href":251}," adresserar privilegie- och identitetsnivån. ",[621,725,35],{"href":36}," adresserar konfigurations- och driftnivån. Tillsammans stänger de de två luckor som gjorde Stryker-attacken möjlig.",[528,728,729],{},"Om du vill förstå hur någon av tjänsterna gäller din nuvarande miljö eller var dina konkreta svagheter finns, pratar vi gärna om det.",[528,731,732],{},"Vi kommer inom kort också att publicera en deep-dive-artikel som undersöker hur Stryker-incidenten över huvud taget kunde bli möjlig.",[535,734,736],{"id":735},"mer-information","Mer information",[528,738,541],{},[740,741,742,750,756,763],"ul",{},[743,744,745],"li",{},[621,746,749],{"href":747,"rel":748},"https://www.cisa.gov/secure-cloud-business-applications",[683],"CISA: Securing Cloud Business Applications",[743,751,752],{},[621,753,755],{"href":681,"rel":754},[683],"Microsoft: Best Practices för att säkra Microsoft Intune",[743,757,758],{},[621,759,762],{"href":760,"rel":761},"https://techcrunch.com/2026/03/19/cisa-urges-companies-to-secure-microsoft-intune-systems-after-hackers-mass-wipe-stryker-devices/?utm_campaign=social",[683],"TechCrunch: CISA uppmanar företag att säkra Microsoft Intune-system efter att hackare massraderat Stryker-enheter",[743,764,765],{},[621,766,769],{"href":767,"rel":768},"https://marketplace.microsoft.com/de-de/product/saas/glueckkanja-gabag.redtenant?tab=overview",[683],"Managed Red Tenant på Azure Marketplace",{"title":771,"searchDepth":772,"depth":772,"links":773},"",2,[774,775,776,777,778,783,784],{"id":537,"depth":772,"text":538},{"id":550,"depth":772,"text":551},{"id":568,"depth":772,"text":569},{"id":580,"depth":772,"text":581},{"id":595,"depth":772,"text":596,"children":779},[780,782],{"id":612,"depth":781,"text":613},3,{"id":663,"depth":781,"text":664},{"id":706,"depth":772,"text":707},{"id":735,"depth":772,"text":736},"md","post",{"lang":788,"seoTitle":789,"titleClass":790,"date":791,"categories":792,"blogtitlepic":794,"socialimg":795,"customExcerpt":796,"keywords":797,"asideNav":798,"contactInContent":813,"maxContent":484,"published":325},"sv","Stryker-attacken: Hur ett komprometterat adminkonto raderade 80 000 enheter via Intune","h2-font-size","2026-03-20",[793],"Security","head-stryker.jpg","/blog/heads/head-stryker.jpg","Den 11 mars 2026 raderade Handala enheter i 79 länder, och allt som krävdes för det var ett komprometterat Intune-adminkonto. Ingen skadlig kod, ingen exploit, bara legitima hanteringsverktyg vända mot sina ägare. Vad som hände, varför det fungerade och vilka två arkitektoniska luckor som måste stängas.","Stryker-attacken, Handala, Microsoft Intune Wipe, Privileged Access Management, Admin-Workstation, Managed Red Tenant, Managed Intune, Zero Trust, Privileged Admin Workstation, PAW, Enterprise Access Model, CISA, säkerhet för endpoint-hantering",{"menuItems":799},[800,802,804,806,809,811],{"href":801,"text":538},"#vad-som-faktiskt-hände",{"href":803,"text":551},"#varför-denna-attack-lyckades",{"href":805,"text":569},"#cisa-har-sett-nog",{"href":807,"text":808},"#separation-är-ingen-lyx-det-är-själva-kontrollen","Separation är ingen lyx",{"href":810,"text":596},"#två-försvarsnivåer",{"href":812,"text":707},"#den-obekväma-frågan",{"quote":325,"infos":814},{"bgColor":815,"headline":816,"subline":817,"level":535,"textStyling":818,"flush":819,"person":820,"form":825},"var(--color-gk-dark-blue)","Ta kontakt","Vill du veta hur Managed Red Tenant och Managed Intune stänger de luckor som Stryker-attacken utnyttjade? Fyll i formuläret så förklarar vi hur det gäller din miljö.","text-light","justify-content-end",{"image":821,"cloudinary":325,"alt":822,"name":523,"quotee":523,"quoteeTitle":823,"quote":824},"/people/people-jan-geisbauer-csoc.jpg","Porträtt av Jan Geisbauer, Head of Security på glueckkanja","Head of Security","Verktyget gjorde exakt det man sa åt det att göra. Problemet var att ingen borde ha kunnat säga åt det att göra det – inte från ett komprometterat vardagskonto, inte utan ett andra godkännande, inte utan en isolerad administrativ miljö. Det är den lucka vi hjälper organisationer att stänga.",{"ctaText":826,"cta":827,"method":786,"action":829,"fields":830},"Skicka",{"skin":828},"primary on-surface","/send",[831,835,840,843,847,852,857,859,862,865,868,870],{"type":832,"id":833,"value":834},"hidden","_next","successful",{"label":836,"type":837,"id":838,"required":325,"requiredMsg":839},"Namn*","text","name","Ange ditt namn.",{"label":841,"type":837,"id":403,"required":325,"requiredMsg":842},"Företag*","Ange ditt företag.",{"label":844,"type":845,"id":845,"required":325,"requiredMsg":846},"E-postadress*","email","Ange din e-postadress.",{"label":848,"type":849,"id":850,"required":484,"requiredMsg":851},"Ditt meddelande till oss","textarea","message","Ange ett meddelande.",{"label":853,"type":854,"id":855,"required":325,"requiredMsg":856},"Dina uppgifter lagras och används för att besvara din förfrågan. Mer information hittar du i vår \u003Ca href=\"/sv/privacy\">integritetspolicy\u003C/a>.","checkbox","dataprotection","Vänligen bekräfta",{"type":832,"id":858,"value":793},"_topic",{"type":832,"id":860,"value":861},"_location","World",{"type":832,"id":863,"value":864},"_subject","Form: Blog Stryker Attack Intune Privilege | SV",{"type":832,"id":866,"value":867},"inbox_key","gkgab-contact-form",{"type":832,"id":869},"_gotcha",{"type":832,"id":871},"jsonData","/posts/2026-03-20-stryker-attack-intune-privilege",{"title":521,"description":530},"posts/2026-03-20-stryker-attack-intune-privilege",[71,876,877],"Privileged Access","Zero Trust","9HfV_bIXUzwQsJS6qowuhqKuPsbo1EAxkm5ANoWOtJ4",{"id":880,"extension":881,"meta":882,"stem":8,"__hash__":1232},"authors_data/authors.json","json",{"path":883,"Fritz Zurhorst":884,"Alexander Schlindwein":890,"Sophie Luna":896,"Nadine Klein":904,"Karsten Kleinschmidt":910,"Julian Wendt":918,"Holger Bunkradt":923,"Ralf Mania":929,"Oliver Kieselbach":935,"Steffen Schwerdtfeger":941,"Gunnar Winter":949,"Jan Petersen":954,"Thorsten Kunzi":959,"Moritz Pohl":963,"Thorben Pöschus":968,"Christoph Hannebauer":974,"Marco Scheel":978,"Christopher Brumm":983,"Florian Klante":990,"Niklas Bachmann":995,"Nils Krautkrämer":1000,"Patrick Treptau":1006,"Peter Beckendorf":1011,"Patrick Sobau":1016,"Jörg Wunderlich":1021,"Michael Breither":1025,"Christian Kanja":1030,"Zeba Hoffmann":1036,"Jochen Fröhlich":1041,"Jan Geisbauer":1045,"Gerrit Reinke":1056,"Christian Kordel":1062,"Stephan Wälde":1066,"Carolin Kanja":1071,"Adrian Ritter":1077,"Marvin Bangert":1082,"Thorsten Pickhan":1088,"Christian Lorenz":1094,"Denis Böhm":1099,"Fabian Bader":1104,"Juan Jose Fernandez Perez":1110,"Mahschid Sayyar":1115,"Benjamin Dassow":1120,"Markus Walschburger":1125,"Jonathan Haist":1130,"Daniel Rohregger":1135,"Thomas Naunheim":1140,"Florian Stöckl":1145,"Pascal Asch":1150,"Markus Kättner":1155,"Anna Ulbricht":1162,"Annette Brauns":1169,"body":1175,"title":1231},"/authors",{"display_name":885,"avatar":886,"permalink":887,"linkedin":888,"imageOffsetTop":889},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":891,"avatar":892,"permalink":893,"twitter":894,"linkedin":895},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":897,"avatar":898,"permalink":899,"twitter":900,"linkedin":901,"imageOffsetLeft":902,"imageOffsetTop":903},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":905,"avatar":906,"permalink":907,"twitter":908,"linkedin":909,"imageOffsetTop":889},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":911,"avatar":912,"permalink":913,"twitter":914,"linkedin":915,"imageOffsetTop":916,"imageOffsetLeft":917},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":919,"avatar":920,"permalink":921,"linkedin":922},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":924,"avatar":925,"permalink":926,"linkedin":927,"twitter":928},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":930,"avatar":931,"permalink":932,"linkedin":933,"twitter":934},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":936,"avatar":937,"permalink":938,"linkedin":939,"twitter":940},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":942,"avatar":943,"permalink":944,"linkedin":945,"twitter":946,"imageOffsetTop":947,"imageOffsetLeft":948},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":950,"avatar":951,"permalink":952,"twitter":900,"linkedin":953},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":955,"avatar":956,"permalink":957,"twitter":900,"linkedin":958},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":960,"avatar":961,"permalink":962,"twitter":900,"linkedin":953,"imageOffsetTop":889},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":964,"avatar":965,"permalink":966,"twitter":900,"linkedin":967},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":969,"avatar":970,"permalink":971,"twitter":972,"linkedin":973},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":975,"avatar":976,"permalink":977,"twitter":900,"linkedin":953,"imageOffsetTop":889},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":979,"avatar":980,"permalink":981,"twitter":982,"linkedin":982},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":984,"avatar":985,"permalink":986,"twitter":987,"linkedin":988,"imageOffsetTop":989},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":991,"avatar":992,"permalink":993,"linkedin":994,"twitter":900},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":996,"avatar":997,"permalink":998,"linkedin":999,"twitter":900},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1001,"avatar":1002,"permalink":1003,"twitter":1004,"linkedin":1005},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1007,"avatar":1008,"permalink":1009,"linkedin":1010,"twitter":900},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1012,"avatar":1013,"permalink":1014,"linkedin":1015,"twitter":900,"imageOffsetTop":889},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1017,"avatar":1018,"permalink":1019,"linkedin":1020,"twitter":900},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1022,"avatar":1023,"permalink":1024,"twitter":900},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1026,"avatar":1027,"permalink":1028,"twitter":900,"linkedin":1029},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1031,"avatar":1032,"permalink":1033,"twitter":1034,"linkedin":1035},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1037,"avatar":1038,"permalink":1039,"linkedin":1040,"twitter":900},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1042,"avatar":1043,"permalink":1044,"twitter":900,"linkedin":953},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":523,"avatar":1046,"permalink":1047,"twitter":1048,"linkedin":1048,"imageOffsetTop":889,"socials":1049},"people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1050,1053],{"text":1051,"href":1052},"Blog","https://emptydc.com",{"text":1054,"href":1055},"Podcast","https://hairlessinthecloud.com",{"display_name":1057,"avatar":1058,"permalink":1059,"twitter":1060,"linkedin":1061},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1063,"avatar":1064,"permalink":1065,"twitter":900,"linkedin":953},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1067,"avatar":1068,"permalink":1069,"twitter":1070,"linkedin":953},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1072,"avatar":1073,"permalink":1074,"twitter":1075,"linkedin":1076},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1078,"avatar":1079,"permalink":1080,"twitter":1081,"linkedin":1081},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1083,"avatar":1084,"permalink":1085,"twitter":1086,"linkedin":1087},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1089,"avatar":1090,"permalink":1091,"twitter":1092,"linkedin":1093},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1095,"avatar":1096,"permalink":1097,"linkedin":1098,"twitter":900},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1100,"avatar":1101,"permalink":1102,"linkedin":1103,"twitter":900},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1105,"avatar":1106,"permalink":1107,"linkedin":1108,"twitter":1109},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1111,"avatar":1112,"permalink":1113,"linkedin":1114},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1116,"avatar":1117,"permalink":1118,"linkedin":1119},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1121,"avatar":1122,"permalink":1123,"linkedin":1124},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1126,"avatar":1127,"permalink":1128,"linkedin":1129},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1131,"avatar":1132,"permalink":1133,"linkedin":1134,"imageOffsetTop":889},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1136,"avatar":1137,"permalink":1138,"linkedin":1139,"imageOffsetTop":889},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1141,"avatar":1142,"permalink":1143,"linkedin":1144,"imageOffsetTop":989},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1146,"avatar":1147,"permalink":1148,"linkedin":1149,"imageOffsetTop":989},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1151,"avatar":1152,"permalink":1153,"linkedin":1154,"imageOffsetTop":989},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1156,"avatar":1157,"permalink":1158,"linkedin":1159,"imageOffsetTop":1160,"imageOffsetLeft":1161},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1163,"avatar":1164,"permalink":1165,"linkedin":1166,"imageOffsetTop":1167,"imageOffsetLeft":1168},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1170,"avatar":1171,"permalink":1172,"linkedin":1173,"imageOffsetTop":1174,"imageOffsetLeft":916},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1176,"Alexander Schlindwein":1177,"Sophie Luna":1178,"Nadine Klein":1179,"Karsten Kleinschmidt":1180,"Julian Wendt":1181,"Holger Bunkradt":1182,"Ralf Mania":1183,"Oliver Kieselbach":1184,"Steffen Schwerdtfeger":1185,"Gunnar Winter":1186,"Jan Petersen":1187,"Thorsten Kunzi":1188,"Moritz Pohl":1189,"Thorben Pöschus":1190,"Christoph Hannebauer":1191,"Marco Scheel":1192,"Christopher Brumm":1193,"Florian Klante":1194,"Niklas Bachmann":1195,"Nils Krautkrämer":1196,"Patrick Treptau":1197,"Peter Beckendorf":1198,"Patrick Sobau":1199,"Jörg Wunderlich":1200,"Michael Breither":1201,"Christian Kanja":1202,"Zeba Hoffmann":1203,"Jochen Fröhlich":1204,"Jan Geisbauer":1205,"Gerrit Reinke":1209,"Christian Kordel":1210,"Stephan Wälde":1211,"Carolin Kanja":1212,"Adrian Ritter":1213,"Marvin Bangert":1214,"Thorsten Pickhan":1215,"Christian Lorenz":1216,"Denis Böhm":1217,"Fabian Bader":1218,"Juan Jose Fernandez Perez":1219,"Mahschid Sayyar":1220,"Benjamin Dassow":1221,"Markus Walschburger":1222,"Jonathan Haist":1223,"Daniel Rohregger":1224,"Thomas Naunheim":1225,"Florian Stöckl":1226,"Pascal Asch":1227,"Markus Kättner":1228,"Anna Ulbricht":1229,"Annette Brauns":1230},{"display_name":885,"avatar":886,"permalink":887,"linkedin":888,"imageOffsetTop":889},{"display_name":891,"avatar":892,"permalink":893,"twitter":894,"linkedin":895},{"display_name":897,"avatar":898,"permalink":899,"twitter":900,"linkedin":901,"imageOffsetLeft":902,"imageOffsetTop":903},{"display_name":905,"avatar":906,"permalink":907,"twitter":908,"linkedin":909,"imageOffsetTop":889},{"display_name":911,"avatar":912,"permalink":913,"twitter":914,"linkedin":915,"imageOffsetTop":916,"imageOffsetLeft":917},{"display_name":919,"avatar":920,"permalink":921,"linkedin":922},{"display_name":924,"avatar":925,"permalink":926,"linkedin":927,"twitter":928},{"display_name":930,"avatar":931,"permalink":932,"linkedin":933,"twitter":934},{"display_name":936,"avatar":937,"permalink":938,"linkedin":939,"twitter":940},{"display_name":942,"avatar":943,"permalink":944,"linkedin":945,"twitter":946,"imageOffsetTop":947,"imageOffsetLeft":948},{"display_name":950,"avatar":951,"permalink":952,"twitter":900,"linkedin":953},{"display_name":955,"avatar":956,"permalink":957,"twitter":900,"linkedin":958},{"display_name":960,"avatar":961,"permalink":962,"twitter":900,"linkedin":953,"imageOffsetTop":889},{"display_name":964,"avatar":965,"permalink":966,"twitter":900,"linkedin":967},{"display_name":969,"avatar":970,"permalink":971,"twitter":972,"linkedin":973},{"display_name":975,"avatar":976,"permalink":977,"twitter":900,"linkedin":953,"imageOffsetTop":889},{"display_name":979,"avatar":980,"permalink":981,"twitter":982,"linkedin":982},{"display_name":984,"avatar":985,"permalink":986,"twitter":987,"linkedin":988,"imageOffsetTop":989},{"display_name":991,"avatar":992,"permalink":993,"linkedin":994,"twitter":900},{"display_name":996,"avatar":997,"permalink":998,"linkedin":999,"twitter":900},{"display_name":1001,"avatar":1002,"permalink":1003,"twitter":1004,"linkedin":1005},{"display_name":1007,"avatar":1008,"permalink":1009,"linkedin":1010,"twitter":900},{"display_name":1012,"avatar":1013,"permalink":1014,"linkedin":1015,"twitter":900,"imageOffsetTop":889},{"display_name":1017,"avatar":1018,"permalink":1019,"linkedin":1020,"twitter":900},{"display_name":1022,"avatar":1023,"permalink":1024,"twitter":900},{"display_name":1026,"avatar":1027,"permalink":1028,"twitter":900,"linkedin":1029},{"display_name":1031,"avatar":1032,"permalink":1033,"twitter":1034,"linkedin":1035},{"display_name":1037,"avatar":1038,"permalink":1039,"linkedin":1040,"twitter":900},{"display_name":1042,"avatar":1043,"permalink":1044,"twitter":900,"linkedin":953},{"display_name":523,"avatar":1046,"permalink":1047,"twitter":1048,"linkedin":1048,"imageOffsetTop":889,"socials":1206},[1207,1208],{"text":1051,"href":1052},{"text":1054,"href":1055},{"display_name":1057,"avatar":1058,"permalink":1059,"twitter":1060,"linkedin":1061},{"display_name":1063,"avatar":1064,"permalink":1065,"twitter":900,"linkedin":953},{"display_name":1067,"avatar":1068,"permalink":1069,"twitter":1070,"linkedin":953},{"display_name":1072,"avatar":1073,"permalink":1074,"twitter":1075,"linkedin":1076},{"display_name":1078,"avatar":1079,"permalink":1080,"twitter":1081,"linkedin":1081},{"display_name":1083,"avatar":1084,"permalink":1085,"twitter":1086,"linkedin":1087},{"display_name":1089,"avatar":1090,"permalink":1091,"twitter":1092,"linkedin":1093},{"display_name":1095,"avatar":1096,"permalink":1097,"linkedin":1098,"twitter":900},{"display_name":1100,"avatar":1101,"permalink":1102,"linkedin":1103,"twitter":900},{"display_name":1105,"avatar":1106,"permalink":1107,"linkedin":1108,"twitter":1109},{"display_name":1111,"avatar":1112,"permalink":1113,"linkedin":1114},{"display_name":1116,"avatar":1117,"permalink":1118,"linkedin":1119},{"display_name":1121,"avatar":1122,"permalink":1123,"linkedin":1124},{"display_name":1126,"avatar":1127,"permalink":1128,"linkedin":1129},{"display_name":1131,"avatar":1132,"permalink":1133,"linkedin":1134,"imageOffsetTop":889},{"display_name":1136,"avatar":1137,"permalink":1138,"linkedin":1139,"imageOffsetTop":889},{"display_name":1141,"avatar":1142,"permalink":1143,"linkedin":1144,"imageOffsetTop":989},{"display_name":1146,"avatar":1147,"permalink":1148,"linkedin":1149,"imageOffsetTop":989},{"display_name":1151,"avatar":1152,"permalink":1153,"linkedin":1154,"imageOffsetTop":989},{"display_name":1156,"avatar":1157,"permalink":1158,"linkedin":1159,"imageOffsetTop":1160,"imageOffsetLeft":1161},{"display_name":1163,"avatar":1164,"permalink":1165,"linkedin":1166,"imageOffsetTop":1167,"imageOffsetLeft":1168},{"display_name":1170,"avatar":1171,"permalink":1172,"linkedin":1173,"imageOffsetTop":1174,"imageOffsetLeft":916},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1234,"authors":1440},[1235,1252,1266,1278,1294,1307,1320,1333,1345,1361,1375,1390,1408,1419,1424],{"id":1236,"title":1237,"author":1238,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1239,"moment":1244,"path":1245,"stem":1246,"tags":1247,"webcast":484},"content_sv/posts/2026-09-22-end-of-mfa-sms.md","Slutet för MFA-SMS",[911],{"lang":788,"date":1240,"categories":1241,"blogtitlepic":1242,"customExcerpt":1243},"2026-09-21",[793],"head-conditional-access.jpg","Varför företag nu bör gå över till phishingresistenta och så långt möjligt lösenordsfria inloggningsmetoder.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[793,1248,1249,1250,1251],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1253,"title":1254,"author":1255,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1256,"moment":1240,"path":1260,"stem":1261,"tags":1262,"webcast":484},"content_sv/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. När användaren är exploiten, och hur ni stoppar det",[885,905],{"lang":788,"date":1240,"categories":1257,"blogtitlepic":1258,"customExcerpt":1259},[793],"head-clickfix.jpg","ClickFix gör användare till sin egen angripare: ett förfalskat CAPTCHA, en copy-paste, och skadlig kod körs i minnet utan att något landar på disken. Hur Microsoft Defender upptäcker attacken, var detekteringen når sina gränser och hur ni stänger luckan med en RunMRU-hunt och fyra skyddslager.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1263,1264,1265],"Defender","SOC","Endpoint Security",{"id":1267,"title":1268,"author":1269,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1270,"moment":1240,"path":1274,"stem":1275,"tags":1276,"webcast":484},"content_sv/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin och vardag på samma dator? Game Over.",[523],{"lang":788,"date":1240,"categories":1271,"blogtitlepic":1272,"customExcerpt":1273},[793],"head-game-over-en.jpg","Varför en tenant inte räcker för CIO:er, och varför den andra sällan tänks med. Managed Red Tenant separerar administrativt arbete arkitektoniskt från kontorsmiljön, Managed Dark Tenant håller företaget handlingskraftigt när försvaret ändå faller. Vad det betyder för driftmodell, SOC-signal och bevisplikterna enligt NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[793,876,877,1277],"NIS2",{"id":1279,"title":1280,"author":1281,"cta":494,"description":1282,"hideInRecent":484,"layout":786,"meta":1283,"moment":1284,"path":1289,"stem":1290,"tags":1291,"webcast":484},"content_sv/posts/2026-08-08-isg-germany-2026.md","Fyra gånger Leader. glueckkanja i ISG-studien Tyskland 2026",[1072],"ISG har bytt namn på sin studie i år. Microsoft Cloud Ecosystem blev Microsoft AI and Cloud Ecosystem, och med namnet har måttstocken förskjutits: det som bedöms är inte längre vem som inför Microsoft-plattformar, utan vem som driver Copilot, agenter och AI-workloads kontrollerbart. På vår position har den nya måttstocken inte ändrat något. ISG Provider Lens®-studien Tyskland 2026 positionerar oss som Leader i fyra kvadranter: Microsoft Productivity and Business Process Services och Azure Managed Services, i både Large Market och Mid Market. Efter 2021, 2023, 2024 och 2025 är det den femte Leader-placeringen i Tyskland, i Schweiz kom steget in i Leader-kvadranten två veckor tidigare.",{"lang":788,"date":1284,"categories":1285,"blogtitlepic":1287,"customExcerpt":1288},"2026-08-08",[1286],"Corporate","head-isg-de-2026.png","ISG Provider Lens®-studien 2026 positionerar glueckkanja i Tyskland som Leader i fyra kvadranter: Microsoft Productivity and Business Process Services och Azure Managed Services, i både Large och Mid Market. Studien heter nu Microsoft AI and Cloud Ecosystem, och måttstocken har förskjutits: det som bedöms är vem som driver AI- och agent-workloads kontrollerbart.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1292,1293],"Award","ISG",{"id":1295,"title":1296,"author":1297,"cta":494,"description":1298,"hideInRecent":484,"layout":786,"meta":1299,"moment":1300,"path":1304,"stem":1305,"tags":1306,"webcast":484},"content_sv/posts/2026-07-31-isg-switzerland-2026.md","Från Rising Star till Leader. glueckkanja i ISG-studien Schweiz 2026",[1072],"2024 grundade vi glueckkanja Switzerland AG och flyttade in i ett kontor i zentroom på Bahnhofplatz 10b i Bern. 2025 placerade ISG oss som Rising Star på den schweiziska marknaden, som den leverantör som analytikerna tror kan ta steget in i Leader-kvadranten. Nu är steget dokumenterat: ISG Provider Lens®-studien 2026 positionerar oss i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inom områdena Azure Managed Services och Microsoft Productivity and Business Process Services.",{"lang":788,"date":1300,"categories":1301,"blogtitlepic":1302,"customExcerpt":1303},"2026-07-31",[1286],"head-isg-ch-2026.png","ISG Provider Lens®-studien 2026 positionerar glueckkanja i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inom områdena Azure Managed Services och Microsoft Productivity and Business Process Services. Två år efter marknadsinträdet i Bern, ett år efter Rising Star-utmärkelsen.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1292,1293],{"id":1308,"title":1309,"author":1310,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1311,"moment":1312,"path":1316,"stem":1317,"tags":1318,"webcast":484},"content_sv/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Vad OpenAI/Hugging-Face-incidenten avslöjar och vad den inte avslöjar",[523],{"lang":788,"date":1312,"categories":1313,"blogtitlepic":1314,"customExcerpt":1315},"2026-07-24",[793],"head-outbreak.jpg","En AI-agent bryter sig ut ur sin testmiljö, hittar en zero-day och hackar ett annat företag. Låter som filmmanus, men hände faktiskt i juli 2026. Tid för en nykter placering: med lite psykologi, två security-veteraner och frågan om vad det betyder för ert försvar.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1319,1264,877],"AI",{"id":1321,"title":1322,"author":1323,"cta":494,"description":1324,"hideInRecent":484,"layout":786,"meta":1325,"moment":1326,"path":1330,"stem":1331,"tags":1332,"webcast":484},"content_sv/posts/2026-07-22-isg-cybersecurity-2026.md","Leader och Rising Star. glueckkanja i ISG:s cybersecurity-studie 2026",[1072],"Ny i kvadranten och direkt Leader: ISG Provider Lens®-studien \"Cybersecurity – Services and Solutions 2026\" positionerar glueckkanja som Leader inom Next-Gen SOC/MDR Services för medelstora företag i Tyskland. I totalmarknaden för Next-Gen SOC/MDR Services utser ISG oss till Rising Star, alltså den leverantör som analytikerna tror kan ta steget in i Leader-kvadranten inom de närmaste 12 till 24 månaderna.",{"lang":788,"date":1326,"categories":1327,"blogtitlepic":1328,"customExcerpt":1329},"2026-07-22",[1286],"head-isg-cybersecurity-2026.png","ISG Provider Lens®-studien Cybersecurity 2026 utser glueckkanja till Leader i kvadranten Next-Gen SOC/MDR Services (Midmarket). I totalmarknaden för Next-Gen SOC/MDR Services är vi Rising Star. ISG intygar att vi har tillväxt över snittet, djup Microsoft-security-expertis och ett 24/7-SOC från Tyskland.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1292,1293,793],{"id":1334,"title":1335,"author":1336,"cta":494,"description":1337,"hideInRecent":484,"layout":786,"meta":1338,"moment":1339,"path":1342,"stem":1343,"tags":1344,"webcast":484},"content_sv/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: vad AI verkligen behöver för att arbeta",[1072],"Ett tillverkande företag vill veta vilka av dess 14 000 SKU:er som faktiskt är lönsamma. Svaret ligger i tre system som aldrig har utbytt en enda datapunkt med varandra. Fram till helt nyligen kostade det tre avdelningar, två veckor och en hel del god vilja att få fram det. Sedan början av 2026 kan en AI besvara den frågan på minuter: söka igenom data, upprätta samband, producera en rekommendation. Förutsatt att den har åtkomst.",{"lang":788,"date":1339,"categories":1340,"blogtitlepic":1341},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1319,131],{"id":1346,"title":1347,"author":1348,"cta":494,"description":1349,"hideInRecent":484,"layout":786,"meta":1350,"moment":1351,"path":1355,"stem":1356,"tags":1357,"webcast":484},"content_sv/posts/2026-07-01-onboarding-process.md","Kontraktet är påskrivet: så går din onboarding till hos oss",[1163],"Hur går egentligen er onboarding till? En fråga som möter oss gång på gång i samtal med sökande, för många har redan varit med om att en onboarding går knaggligt. Desto viktigare är det för oss att ge dig en bra känsla från början.",{"lang":788,"date":1351,"categories":1352,"blogtitlepic":1353,"customExcerpt":1354},"2026-07-01",[1286],"Onboarding_Blogheader","Kontraktet är påskrivet, det första stora steget är taget. Men hur går det vidare nu? Vi tar med dig bakom kulisserna på vår onboarding, från preboarding till första veckan i teamet.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1358,1359,1360],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1362,"title":1363,"author":1364,"cta":494,"description":1365,"hideInRecent":484,"layout":786,"meta":1366,"moment":1367,"path":1371,"stem":1372,"tags":1373,"webcast":484},"content_sv/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: vi hör till",[1072],"I Microsofts partnerekosystem finns en hel rad erkännanden, och ändå skiljer sig Frontier Partner Badge i sin uppläggning från de övriga utmärkelserna. Den går inte att ansöka om, utan tilldelas på Microsofts initiativ till en exklusiv krets av partner som måste övertyga i flera discipliner parallellt, i stället för att briljera i en enda. Microsoft prövar därvid påvisad kompetens inom Cloud & AI Platforms, inom AI Business Solutions och inom Security på lika villkor, och vänder sig därmed till företag som inte uppfattar AI som ett påhäng på befintlig IT, utan som resultatet av en genomgående arkitektur som bär från identiteten via endpointen ända in i produktiv AI-drift.",{"lang":788,"date":1367,"categories":1368,"blogtitlepic":1369,"customExcerpt":1370},"2026-06-26",[1286],"head-frontier-partner-badge.jpg","Sedan en tid tillbaka finns det en ny topputmärkelse i Microsoft AI Cloud Partner Program, Frontier Partner Badge. Microsoft tilldelar den uteslutande till en exklusiv krets av partner världen över som levererar bärkraftiga AI-projekt på hela Microsoft-stacken, från arbetsplatsen via molnplattformen och security ända in i själva AI-tillämpningen, och som har bevisat den ambitionen i praktiken. I DACH-området räknar den här gruppen bara en handfull företag, och vi är ett av dem.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1292,1374,1319],"Microsoft Partner",{"id":1376,"title":1377,"author":1378,"cta":494,"description":1379,"hideInRecent":484,"layout":786,"meta":1380,"moment":1381,"path":1385,"stem":1386,"tags":1387,"webcast":484},"content_sv/posts/2026-06-09-vair-run.md","160 kilometer för ett gott ändamål",[1170],"Söndag morgon, klockan 8:30, Holbeinsteg vid Main. Elva kollegor i enhetliga NinjaCat-tröjor, redo för Frankfurter Runden. Regn, blixt och åska inkluderat. Att springa för ett gott ändamål var motivation nog för att snöra på löparskorna trots det dåliga vädret.",{"lang":788,"date":1381,"categories":1382,"blogtitlepic":1383,"customExcerpt":1384},"2026-06-08",[1286],"frankfurter-runden.png","Elva kollegor, 16 varv, 160 kilometer, ett åskoväder och en pallplats: glueckkanja var med på Frankfurter Runden 2026 och skänkte pengar till VAIR e.V. för varje sprunget varv. Föreningen bygger en inkluderande sport- och kulturpark i Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1388,1358,1389],"Top Arbeitgeber","Soziales Engagement",{"id":1391,"title":1392,"author":1393,"cta":494,"description":1394,"hideInRecent":484,"layout":786,"meta":1395,"moment":1396,"path":1400,"stem":1401,"tags":1402,"webcast":484},"content_sv/posts/2026-04-10-incident-to-intelligence.md","Anatomin hos en okänd AMOS Stealer: Från larm till immunitet på timmar",[1151],"När ett larm utlöses i vårt SOC börjar klockan ticka: inte bara för den drabbade kunden, utan för alla organisationer under vårt skydd. Det farligaste ögonblicket i dagens hotlandskap är the Intelligence Gap, tidsfönstret mellan den första användningen av en ny malware-variant och den dag branschen får kännedom om den.",{"lang":788,"date":1396,"categories":1397,"blogtitlepic":1398,"customExcerpt":1399},"2026-04-10",[793],"head-amos-stealer.png","En hittills odokumenterad AMOS-Stealer-variant komprometterade en macOS-endpoint. Inga kända hashvärden, inga C2-data i offentliga databaser. Vårt SOC monterade ner sex obfuskeringslager, extraherade alla indikatorer och distribuerade skyddet till alla SOC-kunder inom timmar, innan branschen ens hade sett samplet.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1403,1404,1405,1406,1407],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1409,"title":1410,"author":1411,"cta":494,"description":1412,"hideInRecent":484,"layout":786,"meta":1413,"moment":1414,"path":1417,"stem":1418,"tags":494,"webcast":484},"content_sv/posts/2026-03-21-microsoft-edge-corporate-browser.md","Därför bör Edge vara er enda Corporate Browser",[942],"Valet av webbläsare är i företagsmiljöer ett strategiskt beslut: det påverkar direkt hur mycket säkerhet och administrativ börda ni faktiskt har. Google Chrome var länge det närliggande alternativet, men Microsoft Edge har utvecklats till en webbläsare som griper direkt in i den befintliga stacken, framför allt när Microsoft 365 används och administrationen sker via Intune.",{"lang":788,"date":1414,"blogtitlepic":1415,"customExcerpt":1416},"2026-03-21","head-microsoft-edge-default-browser.jpg","Inget företag har egentligen valt Chrome; den fanns bara där, med egen synklogik, egen kontohantering, eget policygränssnitt. Microsoft Edge däremot griper direkt in i den infrastruktur som ändå redan är igång: Entra ID, Intune, Defender. Det här inlägget visar hur bytet ser ut, hur Chrome via en Intune-policy omdirigeras till en landningssida och vad som faller bort när man slutar köra två webbläsare parallellt.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":520,"title":521,"author":1420,"cta":494,"description":530,"hideInRecent":484,"layout":786,"meta":1421,"moment":791,"path":872,"stem":874,"tags":1423,"webcast":484},[523],{"lang":788,"date":791,"categories":1422,"blogtitlepic":794,"customExcerpt":796},[793],[71,876,877],{"id":1425,"title":1426,"author":1427,"cta":494,"description":1428,"hideInRecent":484,"layout":786,"meta":1429,"moment":1430,"path":1434,"stem":1435,"tags":1436,"webcast":484},"content_sv/posts/2026-03-16-ai-agent-hackathon.md","Sex Agents. Fyra veckor. Skarp drift.",[1072],"Hur många timmar per vecka lägger er IT-avdelning på uppgifter som en agent skulle kunna klara på minuter?",{"lang":788,"date":1430,"categories":1431,"blogtitlepic":1432,"customExcerpt":1433},"2026-03-16",[1286],"head-ai-agent-hackathon.jpg","Sex företag, fyra veckors byggfas, sex fungerande AI Agents – det var den första glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa och lila logistik byggde i Copilot Studio agents som idag körs i produktion. Vad som blev resultatet och hur formatet fungerar.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1319,1437,1438,1439],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1441,"Fritz Zurhorst":1442,"Nadine Klein":1443,"Jan Geisbauer":1444,"Carolin Kanja":1448,"Anna Ulbricht":1449,"Annette Brauns":1450,"Pascal Asch":1451,"Steffen Schwerdtfeger":1452},{"display_name":911,"avatar":912,"permalink":913,"twitter":914,"linkedin":915,"imageOffsetTop":916,"imageOffsetLeft":917},{"display_name":885,"avatar":886,"permalink":887,"linkedin":888,"imageOffsetTop":889},{"display_name":905,"avatar":906,"permalink":907,"twitter":908,"linkedin":909,"imageOffsetTop":889},{"display_name":523,"avatar":1046,"permalink":1047,"twitter":1048,"linkedin":1048,"imageOffsetTop":889,"socials":1445},[1446,1447],{"text":1051,"href":1052},{"text":1054,"href":1055},{"display_name":1072,"avatar":1073,"permalink":1074,"twitter":1075,"linkedin":1076},{"display_name":1163,"avatar":1164,"permalink":1165,"linkedin":1166,"imageOffsetTop":1167,"imageOffsetLeft":1168},{"display_name":1170,"avatar":1171,"permalink":1172,"linkedin":1173,"imageOffsetTop":1174,"imageOffsetLeft":916},{"display_name":1151,"avatar":1152,"permalink":1153,"linkedin":1154,"imageOffsetTop":989},{"display_name":942,"avatar":943,"permalink":944,"linkedin":945,"twitter":946,"imageOffsetTop":947,"imageOffsetLeft":948},{"id":880,"extension":881,"meta":1454,"stem":8,"__hash__":1232},{"Jan Geisbauer":1455},{"display_name":523,"avatar":1046,"permalink":1047,"twitter":1048,"linkedin":1048,"imageOffsetTop":889,"socials":1456},[1457,1458],{"text":1051,"href":1052},{"text":1054,"href":1055},1791383950447]