[{"data":1,"prerenderedAt":1413},["ShallowReactive",2],{"sc:header-data-sv":3,"sc:footer-data-sv":489,"post-sv--posts-2026-07-24-outbreak-openai-hugging-face-89c33002d5bfc":519,"authors_data":833,"content-sv-list-7b291c2dd91a4":1187,"authors_data:Jan Geisbauer":1407},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"sv":13},{"title":14,"url":15,"alt":16},"Hem","/sv","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"sv":21},{"title":22,"description":23},"Workplace","Microsoft 365-driven för smarta, säkra och flexibla arbetsmiljöer som förenar den senaste tekniken och identitetslösningar.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"sv":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"sv":34},{"title":35,"url":36},"Managed Intune","/sv/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"sv":40},{"title":41,"url":42},"Managed Entra","/sv/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"sv":46},{"title":47,"url":48},"Managed Workplace","/sv/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"sv":52},{"title":53,"url":54},"Consulting Services","/sv/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"sv":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"sv":64},{"title":65,"url":66},"Microsoft Entra Suite","/sv/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"sv":70},{"title":71,"url":72},"Microsoft Intune","/sv/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"sv":76},{"title":77,"url":78},"Microsoft Windows","/sv/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"sv":82},{"title":83,"url":84},"Windows 365 Cloud PC","/sv/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"sv":88},{"title":89,"url":90},"Cloud Workplace Foundation","/sv/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"sv":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"sv":100},{"title":101,"url":102},"Microsoft 365 Copilot","/sv/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"sv":106},{"title":107,"url":108},"Teams","/sv/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"sv":112},{"title":113,"url":114},"SharePoint & Power Platform","/sv/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"sv":118},{"title":119,"url":120},"Exchange Online","/sv/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"sv":124},{"title":125,"url":126},"Information Protection & Compliance","/sv/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"sv":130},{"title":131,"description":132},"Azure","Driv tillväxt med Azure: Sänk molnkostnaderna, öka effektiviteten och driv innovation genom IaaS och PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"sv":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"sv":142},{"title":143,"url":144},"Azure Managed Services","/sv/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"sv":148},{"title":149,"url":150},"Azure Consulting","/sv/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"sv":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"sv":160},{"title":161,"url":162},"Planera ditt moln","/sv/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"sv":166},{"title":167,"url":168},"Migrera till molnet","/sv/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"sv":172},{"title":173,"url":174},"Förnya din verksamhet","/sv/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"sv":178},{"title":179,"url":180},"Ompröva din VMware-strategi","/sv/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"sv":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"sv":190},{"title":191,"url":192},"Azure Foundation","/sv/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"sv":196},{"title":197,"url":198},"Azure AI Foundation","/sv/azure/azure-ai-foundation",{"name":86,"languages":200},{"sv":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"sv":205},{"title":206,"url":207},"Azure Data Foundation","/sv/azure/azure-data-foundation",{"name":188,"languages":209},{"sv":210},{"title":211,"url":212},"Azure Container Foundation","/sv/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"sv":216},{"title":217,"url":218},"Managed Dark Tenant","/sv/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"sv":222},{"title":223,"url":224},"Cloud Adoption Framework","/sv/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"sv":228},{"title":229,"url":230},"Cloud Competence Center","/sv/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"sv":234},{"title":235,"description":236,"emergency":237},"Säkerhet","Vaksamhet i molnet med en prisbelönt managed service dygnet runt, incident response och toppmodernt skydd för din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Attackerad?","/sv/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"sv":249},{"title":250,"url":251},"Managed Red Tenant","/sv/security/managed-red-tenant",{"name":214,"languages":253},{"sv":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"sv":259},{"title":260,"url":261},"Sentinel Data Lake","/sv/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"sv":265},{"title":266,"url":267},"Security Consulting","/sv/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"sv":274},{"title":275,"url":276},"Cloud Security Operations Center","/sv/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"sv":280},{"title":281,"url":282},"Global Secure Access","/sv/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"sv":286},{"title":287,"url":288},"MyWorkID","/sv/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"sv":295},{"title":296,"url":297},"Preventive Services","/sv/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"sv":301},{"title":302,"url":303},"Data Security Service","/sv/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"sv":307},{"title":308,"url":309},"Security Copilot Agents","/sv/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"sv":313},{"title":314,"url":315},"Implementera NIS2","/sv/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"sv":319},{"title":320,"description":321},"Produkter","Innovativa kompletterande produkter för en helt säker, 100% cloud-native Microsoft-miljö som förbättrar samarbete, nätverksautentisering och programvaruhantering.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"sv":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Molnbaserad programvarudistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"sv":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution från molnet",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"sv":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbeta lokalt med dina Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"sv":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrera dina data från en server till en annan",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"sv":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider för Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"sv":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentisering för ditt nätverk",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"sv":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Hitta kontakter i Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"sv":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-övervakning i realtid",{"name":396,"languages":397},"casestudies",{"sv":398},{"title":399,"url":400,"description":401},"Kundcase","/sv/casestudies","Pionjär i molnet: Din främsta Microsoft-partner för heltäckande molnlösningar med ett Blueprint-baserat tillvägagångssätt och expertis inom Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"sv":405},{"title":406,"description":401},"Företag",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"sv":411},{"title":412},"Om oss",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"sv":417},{"title":418,"url":419},"Fakta och siffror","/sv/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"sv":423},{"title":424,"url":425},"Kontakt och platser","/sv/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"sv":429},{"title":430,"url":431},"glueckkanja Schweiz","/sv/company/switzerland",{"name":433,"languages":434},"austria",{"sv":435},{"title":436,"url":437},"glueckkanja Österrike","/sv/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"sv":441},{"title":442},"Karriär",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"sv":447},{"title":448,"url":449},"Karriäröversikt","/sv/career",{"name":451,"languages":452},"company-young-professionals",{"sv":453},{"title":454,"url":455},"Young Professionals","/sv/young-professionals",{"name":457,"languages":458},"company-jobs",{"sv":459},{"title":460,"url":461},"Lediga jobb","/sv/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"sv":465},{"title":466},"Aktuellt",[468,474],{"name":469,"languages":470},"company-blog",{"sv":471},{"title":472,"url":473},"Blogg","/sv/blog",{"name":469,"languages":475},{"sv":476},{"title":477,"url":478},"Event","/sv/events",[480],{"name":481,"languages":482},"career-meta",{"sv":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"sv":487},{"title":488,"url":425,"active":484},"Kontakt",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksSv":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Integritetspolicy","/sv/privacy",{"title":514,"url":515},"Juridisk information","/sv/imprint",{"title":517,"url":518},"Inga cookies","/sv/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":781,"eventid":494,"extension":792,"hideInRecent":484,"layout":793,"meta":794,"moment":798,"navigation":325,"path":825,"seo":826,"stem":827,"tags":828,"webcast":484,"__hash__":832},"content_sv/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Vad OpenAI/Hugging-Face-incidenten avslöjar och vad den inte avslöjar",[523],"Jan Geisbauer",{"type":525,"value":526,"toc":780},"minimal",[527,532,536,547,556,559,562,566,568,571,574,577,581,583,592,595,599,601,610,613,617,619,622,625,628,637,641,643,652,659,665,669,671,674,677,681,683],[528,529,531],"h2",{"id":530},"vad-som-hände","Vad som hände",[533,534,535],"p",{},"{: .h3-font-size}",[533,537,538,539,546],{},"För några dagar sedan ",[540,541,545],"a",{"href":542,"rel":543},"https://www.cnbc.com/2026/07/22/open-ai-cyber-models-hack-hugging-face.html",[544],"nofollow","offentliggjorde"," OpenAI och Hugging Face en incident som har elektrifierat security-communityn: en autonom AI-agent, driven av GPT-5.6 Sol och en ännu inte offentliggjord, kraftfullare modell, bröt sig under ett internt säkerhetstest ut ur sin isolerade testmiljö. Agenten skaffade sig steg för steg mer åtkomst inne i OpenAI:s system, utnyttjade bland annat en dittills okänd zero-day-sårbarhet, nådde internet och trängde slutligen in i interna system hos Hugging Face för att där få fram information som den ursprungligen hade fått i uppdrag att söka efter.",[533,548,549,550,555],{},"Nu finns de första tekniska detaljerna offentligt, bland annat i ",[540,551,554],{"href":552,"rel":553},"https://simonwillison.net/2026/Jul/22/openai-cyberattack/",[544],"Simon Willisons genomgång av fallet",": testet kördes inom ramen för en exploit-benchmark, medvetet med nedsatta skyddsmekanismer. Testmiljön hade exakt en förbindelse utåt, en intern package-proxy för installation av beroenden, och det var precis i den proxyn som modellen hittade zero-dayen. Utbrytningen var alltså mindre magi än att bända upp den enda dörr som fanns. Hos Hugging Face gick vägen sedan via ett skadligt dataset in i bearbetningsinfrastrukturen, därifrån via avlyssnade credentials in i flera interna kluster.",[533,557,558],{},"Motivet är närmast hela historiens bästa poäng: modellen sökte information som den kunde fuska med i sin egen utvärdering. Den förmodat första fullständigt autonomt utförda AI-attacken var alltså, strikt taget, ett fall av fusk vid provet. Med kollateralskada.",[533,560,561],{},"Hugging Face beskriver incidenten som något som skiljer sig från allt man tidigare hanterat: \"driven, end to end, by an autonomous AI agent system\". OpenAI talar om en cyberincident utan motstycke. Vi vill på inga villkor tona ned betydelsen av den här attacken. Men vi vill ta bort hettan och känslostormen ur debatten, för det är just den som just nu är den största risken för goda beslut.",[528,563,565],{"id":564},"varför-den-här-incidenten-känns-så-hotfull","Varför den här incidenten känns så hotfull",[533,567,535],{},[533,569,570],{},"En blick i psykologin hjälper. Riskforskaren Paul Slovic har visat att vi inte bedömer risker utifrån deras statistiska farlighet, utan framför allt utifrån två dimensioner: hur välbekant en risk är för oss, och hur mycket vi fruktar den. Bilkörning är objektivt farligt men känns harmlöst, eftersom det framstår som välbekant och kontrollerbart. En AI-modell som brutit sig ut ur labbet träffar däremot nerven hos det okända och okontrollerbara och landar därmed precis i den kategori som Slovic beskriver som \"dread risk\".",[533,572,573],{},"Daniel Kahneman har i \"Tänka, snabbt och långsamt\" beskrivit vad som sedan händer: vid okända risker som verkar hotfulla tar vårt snabba, intuitiva, emotionella tänkesystem över, inte det långsamma, analytiska. Precis det mönstret ser vi just nu i många kommentarsfält: incidenten analyseras inte, den känns.",[533,575,576],{},"Alltså: andas djupt en gång, slå på system 2 och betrakta fallet ur ytterligare perspektiv.",[528,578,580],{"id":579},"perspektiv-1-visa-bevisen-florian-roth","Perspektiv 1: visa bevisen (Florian Roth)",[533,582,535],{},[533,584,585,586,591],{},"Security-forskaren Florian Roth (känd bland annat genom Sigma och THOR) stör sig i sitt ",[540,587,590],{"href":588,"rel":589},"https://www.linkedin.com/posts/floroth_one-thing-about-this-openai-hugging-face-share-7485702026429960192-npkt/",[544],"LinkedIn-inlägg"," på en central punkt: den bristande dokumentationen. Hugging Face hävdar att attacken drivits \"end to end\" av ett autonomt agentsystem. Men offrets telemetri kan i princip bara visa vad som hänt i den egna miljön. Den kan inte visa om människor upstream har justerat prompter, startat om körningar, valt ut lyckade vägar eller hjälpt till manuellt vid avgörande punkter. Roths krav är lika enkelt som berättigat: om OpenAI har traces (prompter, tool calls, misslyckade körningar, mänskliga ingrepp), då ska de publicera dem. Till dess är \"fullständigt autonom\" ett påstående, inte ett forensiskt fynd. En kommentator lägger träffande till: inte ens då skulle det gå att bortom tvivel visa hur mycket mänsklig interaktion som faktiskt förekom.",[533,593,594],{},"Och Roth sätter dessutom en spets på det. De två AI-företagens berättelse går i kärnan ut på tre rader: AI attackerade oss. AI räddade oss. Alltså behöver nu alla mer AI. Vad som för tio år sedan hade varit en skamfläck (svag isolering, alltför vidsträckta privilegier, otillräcklig segmentering, enorm blast radius) paketeras i dag som capability-demo och heroisk AI-mot-AI-historia. Hans torra slutsats: rate limits, egress-restriktioner, isolerade workers och snyggt begränsade credentials hade bromsat stora delar av den här aktiviteten och gjort den synlig tidigt. För det behöver ingen en LLM.",[528,596,598],{"id":597},"perspektiv-2-vi-har-överlevt-värre-marcus-hutchins","Perspektiv 2: vi har överlevt värre (Marcus Hutchins)",[533,600,535],{},[533,602,603,604,609],{},"Marcus Hutchins, security-forskaren som 2017 stoppade WannaCry-utbrottet med en kill switch, placerar incidenten historiskt i sitt ",[540,605,608],{"href":606,"rel":607},"https://www.linkedin.com/posts/malwaretech_anytime-someone-is-freaking-out-about-fully-share-7485851514784272384-0-oa/",[544],"inlägg",". Den som får panik vid \"fullständigt autonoma cyberattacker\" bör påminna sig om datormaskarnas guldålder: ILOVEYOU, Code Red, SQL Slammer. Självreplikerande malware som utan något mänskligt bidrag infekterade miljoner system på en enda dag, i en tid när många system hängde oskyddade direkt på internet.",[533,611,612],{},"Hans argument: agentiska attacker är fundamentalt begränsade av hastighet och kostnad. Under den tid det tar för en AI-modell att generera ett enda svar hade en klassisk mask redan infekterat åtskilliga tusen system, och tokenkostnaderna för att autonomt hacka miljoner system spränger budgeten hos de flesta angripare. Till det kommer: brandväggar, EDR, nätverkssegmentering, sandboxing, MFA och många andra kontroller är i dag standard och utgör verkliga hinder som helt enkelt inte fanns då. Hans slutsats: AI-stödda attacker kan inte kasta tillbaka cybersecurity med decennier. De kan inte skaffa bort en gång etablerade säkerhetskontroller och grundläggande hygien ur världen. Attack surface reduction fungerar. En zero-day kan inte träffa ett system som den inte når.",[528,614,616],{"id":615},"vad-båda-säger-och-vad-som-följer-av-det","Vad båda säger och vad som följer av det",[533,618,535],{},[533,620,621],{},"Båda experterna kommer på olika vägar till samma slutsats: koncentration på det väsentliga. Företag som kontinuerligt förbättrar sin security posture och konsekvent genomför koncept som Zero Trust, least privilege och tydlig tier-separation blir offer med betydligt lägre sannolikhet, oavsett om det i andra änden sitter en människa, ett skript eller en språkmodell.",[533,623,624],{},"Incidenten måste man ändå ta på allvar, och det oberoende av hur bevisfrågan utfaller. Den här incidenten är inget exempel på hur AI tar över internet. Men den visar hur en målriktad attack ser ut på en ny nivå: den autonoma sammankopplingen av två separata attackkedjor över två främmande infrastrukturer, utförd i många tusen enskilda handlingar från en svärm av kortlivade sandboxes. Skulle OpenAI publicera traces och belägga full autonomi blir bilden inte harmlösare. På försvarslogiken ändrar det däremot inget. Det bekräftar den.",[533,626,627],{},"Att angripare hittar vägar som man inte har tänkt på i förväg är ingen ny insikt, utan vardagsmat för alla som arbetar med security. Just därför finns Defense in Depth: upptäcker eller stoppar jag inte angriparen vid station 4 i attackkedjan, så gör jag det vid station 5. Det inkluderar uttryckligen zero-days. Man kan bygga infrastrukturer så att de står emot även vilda stormar. Inte för att man förutser varje storm, utan för att man bygger för stormar.",[533,629,630,631,636],{},"En ironi i marginalen som nästan försvinner i bullret: för den forensiska analysen satsade Hugging Face just på en öppen kinesisk modell, bland annat för att en hostad amerikansk frontier-modell ",[540,632,635],{"href":633,"rel":634},"https://huggingface.co/datasets/huggingface/forensic-refusal/blob/main/glm5.2.jsonl",[544],"helt enkelt vägrade analysera en backdoor",". Debatten om vilka verktyg försvarare får använda och hur snabbt i ett skarpt läge har alltså bara börjat, och den är minst lika viktig som frågan om vad angripare framöver kan göra.",[528,638,640],{"id":639},"inget-autonomt-soc-men-ett-bättre","Inget autonomt SOC, men ett bättre",[533,642,535],{},[533,644,645,646,651],{},"Både försvar och attack har fått nya verktyg. Fast \"verktyg\" träffar sedan länge inte saken hos oss. AI är i vårt SOC inget tillägg, utan en självklar del av varje fas i incidenthanteringen: från detektering över triage och enrichment till response arbetar våra analytiker sida vid sida med lösningarna och modellerna från Microsoft och Anthropic. Det repetitiva körs automatiserat, så att våra experter kan koncentrera sig på det som gör skillnad: att dra nya insikter ur varje incident och hela tiden vässa detektioner, playbooks och konfigurationer. Ett till 100 % autonomt SOC är för närvarande inte möjligt, ",[540,647,650],{"href":648,"rel":649},"https://www.linkedin.com/posts/peteshoard_gartner-soc-threat-share-7457373093368500224-uszD/",[544],"det anser för övrigt även Gartner",". Men reglaget är hos oss ingen trosfråga, utan en inställning som vi kontinuerligt omvärderar: med varje modellgeneration och varje vunnen erfarenhet vrider vi upp det precis så långt som kvaliteten tillåter. Inte längre, men inte heller en millimeter mindre.",[533,653,654,655,658],{},"Det samspelet mellan människa, modell och metod är kärnan i vårt ",[540,656,657],{"href":276},"Cloud Security Operations Center (CSOC)",": 24/7 detection & response, kombinerat med continuous improvement. Varje månad en bit bättre security posture, baserat på våra blueprints och på det som våra threat-experter observerar i det fria.",[533,660,661,662,664],{},"Och mot grundproblemet som Florian Roth så precist dissekerar (svag isolering, skenande privilegier, avsaknad av segmentering) har vi ett mycket konkret svar: ",[540,663,250],{"href":251},". En fullständigt isolerad administrativ miljö som strukturellt förhindrar lateral movement och privilege escalation. Med rätt arkitektur och rätt konfigurationer går attacker ut i tomma intet, också de som kommer från AI-agenter. För oavsett om en angripare består av kött och blod eller av tokens: mot en tier-gräns som inte går att övervinna hjälper inte heller det bästa reasoning.",[528,666,668],{"id":667},"slutsats","Slutsats",[533,670,535],{},[533,672,673],{},"OpenAI/Hugging-Face-incidenten är en milstolpe: som varning, som fallstudie och som försmak. Men den är inget skäl för panik, utan för prioriteringar. Framtidens attacker blir kanske mer autonoma; det försvar som hjälper mot dem är förvånansvärt välbekant: Zero Trust, least privilege, ren tier-separation, Defense in Depth och ett SOC som aldrig sover.",[533,675,676],{},"Eller, för att hålla fast vid poängen i den här incidenten: om nu en AI måste bryta sig ut för att fuska på sitt eget prov, bör vi se till att den åtminstone inte hittar några svar hos oss.",[528,678,680],{"id":679},"källor-och-vidare-läsning","Källor och vidare läsning",[533,682,535],{},[684,685,687,688,687,702,687,711,687,720,687,729,687,738,687,747,687,757,687,767,687,774],"ul",{"style":686},"margin: 0.25rem 0","\n  ",[689,690,691,695,696,701],"li",{},[692,693,694],"strong",{},"CNBC:"," ",[540,697,700],{"href":542,"target":330,"rel":698},[699],"noopener","OpenAI cyber models broke out of training environment to hack Hugging Face"," (2026-07-22)",[689,703,704,695,707],{},[692,705,706],{},"Florian Roth på LinkedIn:",[540,708,710],{"href":588,"target":330,"rel":709},[699],"\"One thing about this OpenAI / Hugging Face incident really bothers me\"",[689,712,713,695,716],{},[692,714,715],{},"Marcus Hutchins på LinkedIn:",[540,717,719],{"href":606,"target":330,"rel":718},[699],"Om datormaskarnas guldålder",[689,721,722,695,725],{},[692,723,724],{},"Hugging Face:",[540,726,728],{"href":633,"target":330,"rel":727},[699],"Forensic-refusal-dataset (GLM 5.2)",[689,730,731,695,734,701],{},[692,732,733],{},"Simon Willison:",[540,735,737],{"href":552,"target":330,"rel":736},[699],"OpenAI's accidental cyberattack against Hugging Face is science fiction that happened",[689,739,740,695,743],{},[692,741,742],{},"Pete Shoard (Gartner) på LinkedIn:",[540,744,746],{"href":648,"target":330,"rel":745},[699],"Varför ett helt autonomt SOC inte är realistiskt",[689,748,749,695,752],{},[692,750,751],{},"Paul Slovic:",[540,753,756],{"href":754,"target":330,"rel":755},"https://de.wikipedia.org/wiki/Paul_Slovic",[699],"Wikipedia",[689,758,759,695,762,766],{},[692,760,761],{},"Daniel Kahneman:",[540,763,756],{"href":764,"target":330,"rel":765},"https://de.wikipedia.org/wiki/Daniel_Kahneman",[699],", \"Tänka, snabbt och långsamt\"",[689,768,769,695,772],{},[692,770,771],{},"glueckkanja:",[540,773,657],{"href":276},[689,775,776,695,778],{},[692,777,771],{},[540,779,250],{"href":251},{"title":781,"searchDepth":782,"depth":782,"links":783},"",2,[784,785,786,787,788,789,790,791],{"id":530,"depth":782,"text":531},{"id":564,"depth":782,"text":565},{"id":579,"depth":782,"text":580},{"id":597,"depth":782,"text":598},{"id":615,"depth":782,"text":616},{"id":639,"depth":782,"text":640},{"id":667,"depth":782,"text":668},{"id":679,"depth":782,"text":680},"md","post",{"lang":795,"seoTitle":796,"titleClass":797,"date":798,"categories":799,"blogtitlepic":801,"socialimg":802,"customExcerpt":803,"keywords":804,"asideNav":805,"published":325},"sv","OpenAI-AI hackar Hugging Face: vad den autonoma AI-attacken betyder för företag","h2-font-size","2026-07-24",[800],"Security","head-outbreak.jpg","/blog/heads/head-outbreak.jpg","En AI-agent bryter sig ut ur sin testmiljö, hittar en zero-day och hackar ett annat företag. Låter som filmmanus, men hände faktiskt i juli 2026. Tid för en nykter placering: med lite psykologi, två security-veteraner och frågan om vad det betyder för ert försvar.","OpenAI Hugging Face-incidenten, OpenAI-AI hackar Hugging Face, autonom AI-attack, AI-agent sandbox-utbrytning, autonom cyberattack, AI cybersecurity, agentiska attacker, GPT-5.6 Sol, zero-day, Florian Roth, Marcus Hutchins, Zero Trust, Defense in Depth, autonomt SOC, Cloud Security Operations Center",{"menuItems":806},[807,809,812,815,818,821,823],{"href":808,"text":531},"#vad-som-hände",{"href":810,"text":811},"#varför-den-här-incidenten-känns-så-hotfull","Psykologin bakom",{"href":813,"text":814},"#perspektiv-1-visa-bevisen-florian-roth","Perspektiv 1: Florian Roth",{"href":816,"text":817},"#perspektiv-2-vi-har-överlevt-värre-marcus-hutchins","Perspektiv 2: Marcus Hutchins",{"href":819,"text":820},"#vad-båda-säger-och-vad-som-följer-av-det","Vad som följer av det",{"href":822,"text":640},"#inget-autonomt-soc-men-ett-bättre",{"href":824,"text":668},"#slutsats","/posts/2026-07-24-outbreak-openai-hugging-face",{"title":521,"description":781},"posts/2026-07-24-outbreak-openai-hugging-face",[829,830,831],"AI","SOC","Zero Trust","jrdff2dGMfyVtAR9w_kESQeC68h-tkDiBH3Z8KNcJ0Y",{"id":834,"extension":835,"meta":836,"stem":8,"__hash__":1186},"authors_data/authors.json","json",{"path":837,"Fritz Zurhorst":838,"Alexander Schlindwein":844,"Sophie Luna":850,"Nadine Klein":858,"Karsten Kleinschmidt":864,"Julian Wendt":872,"Holger Bunkradt":877,"Ralf Mania":883,"Oliver Kieselbach":889,"Steffen Schwerdtfeger":895,"Gunnar Winter":903,"Jan Petersen":908,"Thorsten Kunzi":913,"Moritz Pohl":917,"Thorben Pöschus":922,"Christoph Hannebauer":928,"Marco Scheel":932,"Christopher Brumm":937,"Florian Klante":944,"Niklas Bachmann":949,"Nils Krautkrämer":954,"Patrick Treptau":960,"Peter Beckendorf":965,"Patrick Sobau":970,"Jörg Wunderlich":975,"Michael Breither":979,"Christian Kanja":984,"Zeba Hoffmann":990,"Jochen Fröhlich":995,"Jan Geisbauer":999,"Gerrit Reinke":1010,"Christian Kordel":1016,"Stephan Wälde":1020,"Carolin Kanja":1025,"Adrian Ritter":1031,"Marvin Bangert":1036,"Thorsten Pickhan":1042,"Christian Lorenz":1048,"Denis Böhm":1053,"Fabian Bader":1058,"Juan Jose Fernandez Perez":1064,"Mahschid Sayyar":1069,"Benjamin Dassow":1074,"Markus Walschburger":1079,"Jonathan Haist":1084,"Daniel Rohregger":1089,"Thomas Naunheim":1094,"Florian Stöckl":1099,"Pascal Asch":1104,"Markus Kättner":1109,"Anna Ulbricht":1116,"Annette Brauns":1123,"body":1129,"title":1185},"/authors",{"display_name":839,"avatar":840,"permalink":841,"linkedin":842,"imageOffsetTop":843},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":845,"avatar":846,"permalink":847,"twitter":848,"linkedin":849},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":851,"avatar":852,"permalink":853,"twitter":854,"linkedin":855,"imageOffsetLeft":856,"imageOffsetTop":857},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":859,"avatar":860,"permalink":861,"twitter":862,"linkedin":863,"imageOffsetTop":843},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":865,"avatar":866,"permalink":867,"twitter":868,"linkedin":869,"imageOffsetTop":870,"imageOffsetLeft":871},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":873,"avatar":874,"permalink":875,"linkedin":876},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":878,"avatar":879,"permalink":880,"linkedin":881,"twitter":882},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":884,"avatar":885,"permalink":886,"linkedin":887,"twitter":888},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":890,"avatar":891,"permalink":892,"linkedin":893,"twitter":894},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":896,"avatar":897,"permalink":898,"linkedin":899,"twitter":900,"imageOffsetTop":901,"imageOffsetLeft":902},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":904,"avatar":905,"permalink":906,"twitter":854,"linkedin":907},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":909,"avatar":910,"permalink":911,"twitter":854,"linkedin":912},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":914,"avatar":915,"permalink":916,"twitter":854,"linkedin":907,"imageOffsetTop":843},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":918,"avatar":919,"permalink":920,"twitter":854,"linkedin":921},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":923,"avatar":924,"permalink":925,"twitter":926,"linkedin":927},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":929,"avatar":930,"permalink":931,"twitter":854,"linkedin":907,"imageOffsetTop":843},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":933,"avatar":934,"permalink":935,"twitter":936,"linkedin":936},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":938,"avatar":939,"permalink":940,"twitter":941,"linkedin":942,"imageOffsetTop":943},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":945,"avatar":946,"permalink":947,"linkedin":948,"twitter":854},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":950,"avatar":951,"permalink":952,"linkedin":953,"twitter":854},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":955,"avatar":956,"permalink":957,"twitter":958,"linkedin":959},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":961,"avatar":962,"permalink":963,"linkedin":964,"twitter":854},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":966,"avatar":967,"permalink":968,"linkedin":969,"twitter":854,"imageOffsetTop":843},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":971,"avatar":972,"permalink":973,"linkedin":974,"twitter":854},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":976,"avatar":977,"permalink":978,"twitter":854},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":980,"avatar":981,"permalink":982,"twitter":854,"linkedin":983},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":985,"avatar":986,"permalink":987,"twitter":988,"linkedin":989},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":991,"avatar":992,"permalink":993,"linkedin":994,"twitter":854},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":996,"avatar":997,"permalink":998,"twitter":854,"linkedin":907},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":523,"avatar":1000,"permalink":1001,"twitter":1002,"linkedin":1002,"imageOffsetTop":843,"socials":1003},"people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1004,1007],{"text":1005,"href":1006},"Blog","https://emptydc.com",{"text":1008,"href":1009},"Podcast","https://hairlessinthecloud.com",{"display_name":1011,"avatar":1012,"permalink":1013,"twitter":1014,"linkedin":1015},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1017,"avatar":1018,"permalink":1019,"twitter":854,"linkedin":907},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1021,"avatar":1022,"permalink":1023,"twitter":1024,"linkedin":907},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1026,"avatar":1027,"permalink":1028,"twitter":1029,"linkedin":1030},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1032,"avatar":1033,"permalink":1034,"twitter":1035,"linkedin":1035},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1037,"avatar":1038,"permalink":1039,"twitter":1040,"linkedin":1041},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1043,"avatar":1044,"permalink":1045,"twitter":1046,"linkedin":1047},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1049,"avatar":1050,"permalink":1051,"linkedin":1052,"twitter":854},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1054,"avatar":1055,"permalink":1056,"linkedin":1057,"twitter":854},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1059,"avatar":1060,"permalink":1061,"linkedin":1062,"twitter":1063},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1065,"avatar":1066,"permalink":1067,"linkedin":1068},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1070,"avatar":1071,"permalink":1072,"linkedin":1073},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1075,"avatar":1076,"permalink":1077,"linkedin":1078},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1080,"avatar":1081,"permalink":1082,"linkedin":1083},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"imageOffsetTop":843},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1090,"avatar":1091,"permalink":1092,"linkedin":1093,"imageOffsetTop":843},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1095,"avatar":1096,"permalink":1097,"linkedin":1098,"imageOffsetTop":943},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1100,"avatar":1101,"permalink":1102,"linkedin":1103,"imageOffsetTop":943},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1105,"avatar":1106,"permalink":1107,"linkedin":1108,"imageOffsetTop":943},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1110,"avatar":1111,"permalink":1112,"linkedin":1113,"imageOffsetTop":1114,"imageOffsetLeft":1115},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1117,"avatar":1118,"permalink":1119,"linkedin":1120,"imageOffsetTop":1121,"imageOffsetLeft":1122},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1124,"avatar":1125,"permalink":1126,"linkedin":1127,"imageOffsetTop":1128,"imageOffsetLeft":870},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1130,"Alexander Schlindwein":1131,"Sophie Luna":1132,"Nadine Klein":1133,"Karsten Kleinschmidt":1134,"Julian Wendt":1135,"Holger Bunkradt":1136,"Ralf Mania":1137,"Oliver Kieselbach":1138,"Steffen Schwerdtfeger":1139,"Gunnar Winter":1140,"Jan Petersen":1141,"Thorsten Kunzi":1142,"Moritz Pohl":1143,"Thorben Pöschus":1144,"Christoph Hannebauer":1145,"Marco Scheel":1146,"Christopher Brumm":1147,"Florian Klante":1148,"Niklas Bachmann":1149,"Nils Krautkrämer":1150,"Patrick Treptau":1151,"Peter Beckendorf":1152,"Patrick Sobau":1153,"Jörg Wunderlich":1154,"Michael Breither":1155,"Christian Kanja":1156,"Zeba Hoffmann":1157,"Jochen Fröhlich":1158,"Jan Geisbauer":1159,"Gerrit Reinke":1163,"Christian Kordel":1164,"Stephan Wälde":1165,"Carolin Kanja":1166,"Adrian Ritter":1167,"Marvin Bangert":1168,"Thorsten Pickhan":1169,"Christian Lorenz":1170,"Denis Böhm":1171,"Fabian Bader":1172,"Juan Jose Fernandez Perez":1173,"Mahschid Sayyar":1174,"Benjamin Dassow":1175,"Markus Walschburger":1176,"Jonathan Haist":1177,"Daniel Rohregger":1178,"Thomas Naunheim":1179,"Florian Stöckl":1180,"Pascal Asch":1181,"Markus Kättner":1182,"Anna Ulbricht":1183,"Annette Brauns":1184},{"display_name":839,"avatar":840,"permalink":841,"linkedin":842,"imageOffsetTop":843},{"display_name":845,"avatar":846,"permalink":847,"twitter":848,"linkedin":849},{"display_name":851,"avatar":852,"permalink":853,"twitter":854,"linkedin":855,"imageOffsetLeft":856,"imageOffsetTop":857},{"display_name":859,"avatar":860,"permalink":861,"twitter":862,"linkedin":863,"imageOffsetTop":843},{"display_name":865,"avatar":866,"permalink":867,"twitter":868,"linkedin":869,"imageOffsetTop":870,"imageOffsetLeft":871},{"display_name":873,"avatar":874,"permalink":875,"linkedin":876},{"display_name":878,"avatar":879,"permalink":880,"linkedin":881,"twitter":882},{"display_name":884,"avatar":885,"permalink":886,"linkedin":887,"twitter":888},{"display_name":890,"avatar":891,"permalink":892,"linkedin":893,"twitter":894},{"display_name":896,"avatar":897,"permalink":898,"linkedin":899,"twitter":900,"imageOffsetTop":901,"imageOffsetLeft":902},{"display_name":904,"avatar":905,"permalink":906,"twitter":854,"linkedin":907},{"display_name":909,"avatar":910,"permalink":911,"twitter":854,"linkedin":912},{"display_name":914,"avatar":915,"permalink":916,"twitter":854,"linkedin":907,"imageOffsetTop":843},{"display_name":918,"avatar":919,"permalink":920,"twitter":854,"linkedin":921},{"display_name":923,"avatar":924,"permalink":925,"twitter":926,"linkedin":927},{"display_name":929,"avatar":930,"permalink":931,"twitter":854,"linkedin":907,"imageOffsetTop":843},{"display_name":933,"avatar":934,"permalink":935,"twitter":936,"linkedin":936},{"display_name":938,"avatar":939,"permalink":940,"twitter":941,"linkedin":942,"imageOffsetTop":943},{"display_name":945,"avatar":946,"permalink":947,"linkedin":948,"twitter":854},{"display_name":950,"avatar":951,"permalink":952,"linkedin":953,"twitter":854},{"display_name":955,"avatar":956,"permalink":957,"twitter":958,"linkedin":959},{"display_name":961,"avatar":962,"permalink":963,"linkedin":964,"twitter":854},{"display_name":966,"avatar":967,"permalink":968,"linkedin":969,"twitter":854,"imageOffsetTop":843},{"display_name":971,"avatar":972,"permalink":973,"linkedin":974,"twitter":854},{"display_name":976,"avatar":977,"permalink":978,"twitter":854},{"display_name":980,"avatar":981,"permalink":982,"twitter":854,"linkedin":983},{"display_name":985,"avatar":986,"permalink":987,"twitter":988,"linkedin":989},{"display_name":991,"avatar":992,"permalink":993,"linkedin":994,"twitter":854},{"display_name":996,"avatar":997,"permalink":998,"twitter":854,"linkedin":907},{"display_name":523,"avatar":1000,"permalink":1001,"twitter":1002,"linkedin":1002,"imageOffsetTop":843,"socials":1160},[1161,1162],{"text":1005,"href":1006},{"text":1008,"href":1009},{"display_name":1011,"avatar":1012,"permalink":1013,"twitter":1014,"linkedin":1015},{"display_name":1017,"avatar":1018,"permalink":1019,"twitter":854,"linkedin":907},{"display_name":1021,"avatar":1022,"permalink":1023,"twitter":1024,"linkedin":907},{"display_name":1026,"avatar":1027,"permalink":1028,"twitter":1029,"linkedin":1030},{"display_name":1032,"avatar":1033,"permalink":1034,"twitter":1035,"linkedin":1035},{"display_name":1037,"avatar":1038,"permalink":1039,"twitter":1040,"linkedin":1041},{"display_name":1043,"avatar":1044,"permalink":1045,"twitter":1046,"linkedin":1047},{"display_name":1049,"avatar":1050,"permalink":1051,"linkedin":1052,"twitter":854},{"display_name":1054,"avatar":1055,"permalink":1056,"linkedin":1057,"twitter":854},{"display_name":1059,"avatar":1060,"permalink":1061,"linkedin":1062,"twitter":1063},{"display_name":1065,"avatar":1066,"permalink":1067,"linkedin":1068},{"display_name":1070,"avatar":1071,"permalink":1072,"linkedin":1073},{"display_name":1075,"avatar":1076,"permalink":1077,"linkedin":1078},{"display_name":1080,"avatar":1081,"permalink":1082,"linkedin":1083},{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"imageOffsetTop":843},{"display_name":1090,"avatar":1091,"permalink":1092,"linkedin":1093,"imageOffsetTop":843},{"display_name":1095,"avatar":1096,"permalink":1097,"linkedin":1098,"imageOffsetTop":943},{"display_name":1100,"avatar":1101,"permalink":1102,"linkedin":1103,"imageOffsetTop":943},{"display_name":1105,"avatar":1106,"permalink":1107,"linkedin":1108,"imageOffsetTop":943},{"display_name":1110,"avatar":1111,"permalink":1112,"linkedin":1113,"imageOffsetTop":1114,"imageOffsetLeft":1115},{"display_name":1117,"avatar":1118,"permalink":1119,"linkedin":1120,"imageOffsetTop":1121,"imageOffsetLeft":1122},{"display_name":1124,"avatar":1125,"permalink":1126,"linkedin":1127,"imageOffsetTop":1128,"imageOffsetLeft":870},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1188,"authors":1394},[1189,1206,1219,1232,1248,1261,1266,1279,1291,1307,1321,1336,1354,1365,1378],{"id":1190,"title":1191,"author":1192,"cta":494,"description":781,"hideInRecent":484,"layout":793,"meta":1193,"moment":1198,"path":1199,"stem":1200,"tags":1201,"webcast":484},"content_sv/posts/2026-09-22-end-of-mfa-sms.md","Slutet för MFA-SMS",[865],{"lang":795,"date":1194,"categories":1195,"blogtitlepic":1196,"customExcerpt":1197},"2026-09-21",[800],"head-conditional-access.jpg","Varför företag nu bör gå över till phishingresistenta och så långt möjligt lösenordsfria inloggningsmetoder.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[800,1202,1203,1204,1205],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1207,"title":1208,"author":1209,"cta":494,"description":781,"hideInRecent":484,"layout":793,"meta":1210,"moment":1194,"path":1214,"stem":1215,"tags":1216,"webcast":484},"content_sv/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. När användaren är exploiten, och hur ni stoppar det",[839,859],{"lang":795,"date":1194,"categories":1211,"blogtitlepic":1212,"customExcerpt":1213},[800],"head-clickfix.jpg","ClickFix gör användare till sin egen angripare: ett förfalskat CAPTCHA, en copy-paste, och skadlig kod körs i minnet utan att något landar på disken. Hur Microsoft Defender upptäcker attacken, var detekteringen når sina gränser och hur ni stänger luckan med en RunMRU-hunt och fyra skyddslager.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1217,830,1218],"Defender","Endpoint Security",{"id":1220,"title":1221,"author":1222,"cta":494,"description":781,"hideInRecent":484,"layout":793,"meta":1223,"moment":1194,"path":1227,"stem":1228,"tags":1229,"webcast":484},"content_sv/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin och vardag på samma dator? Game Over.",[523],{"lang":795,"date":1194,"categories":1224,"blogtitlepic":1225,"customExcerpt":1226},[800],"head-game-over-en.jpg","Varför en tenant inte räcker för CIO:er, och varför den andra sällan tänks med. Managed Red Tenant separerar administrativt arbete arkitektoniskt från kontorsmiljön, Managed Dark Tenant håller företaget handlingskraftigt när försvaret ändå faller. Vad det betyder för driftmodell, SOC-signal och bevisplikterna enligt NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[800,1230,831,1231],"Privileged Access","NIS2",{"id":1233,"title":1234,"author":1235,"cta":494,"description":1236,"hideInRecent":484,"layout":793,"meta":1237,"moment":1238,"path":1243,"stem":1244,"tags":1245,"webcast":484},"content_sv/posts/2026-08-08-isg-germany-2026.md","Fyra gånger Leader. glueckkanja i ISG-studien Tyskland 2026",[1026],"ISG har bytt namn på sin studie i år. Microsoft Cloud Ecosystem blev Microsoft AI and Cloud Ecosystem, och med namnet har måttstocken förskjutits: det som bedöms är inte längre vem som inför Microsoft-plattformar, utan vem som driver Copilot, agenter och AI-workloads kontrollerbart. På vår position har den nya måttstocken inte ändrat något. ISG Provider Lens®-studien Tyskland 2026 positionerar oss som Leader i fyra kvadranter: Microsoft Productivity and Business Process Services och Azure Managed Services, i både Large Market och Mid Market. Efter 2021, 2023, 2024 och 2025 är det den femte Leader-placeringen i Tyskland, i Schweiz kom steget in i Leader-kvadranten två veckor tidigare.",{"lang":795,"date":1238,"categories":1239,"blogtitlepic":1241,"customExcerpt":1242},"2026-08-08",[1240],"Corporate","head-isg-de-2026.png","ISG Provider Lens®-studien 2026 positionerar glueckkanja i Tyskland som Leader i fyra kvadranter: Microsoft Productivity and Business Process Services och Azure Managed Services, i både Large och Mid Market. Studien heter nu Microsoft AI and Cloud Ecosystem, och måttstocken har förskjutits: det som bedöms är vem som driver AI- och agent-workloads kontrollerbart.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1246,1247],"Award","ISG",{"id":1249,"title":1250,"author":1251,"cta":494,"description":1252,"hideInRecent":484,"layout":793,"meta":1253,"moment":1254,"path":1258,"stem":1259,"tags":1260,"webcast":484},"content_sv/posts/2026-07-31-isg-switzerland-2026.md","Från Rising Star till Leader. glueckkanja i ISG-studien Schweiz 2026",[1026],"2024 grundade vi glueckkanja Switzerland AG och flyttade in i ett kontor i zentroom på Bahnhofplatz 10b i Bern. 2025 placerade ISG oss som Rising Star på den schweiziska marknaden, som den leverantör som analytikerna tror kan ta steget in i Leader-kvadranten. Nu är steget dokumenterat: ISG Provider Lens®-studien 2026 positionerar oss i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inom områdena Azure Managed Services och Microsoft Productivity and Business Process Services.",{"lang":795,"date":1254,"categories":1255,"blogtitlepic":1256,"customExcerpt":1257},"2026-07-31",[1240],"head-isg-ch-2026.png","ISG Provider Lens®-studien 2026 positionerar glueckkanja i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inom områdena Azure Managed Services och Microsoft Productivity and Business Process Services. Två år efter marknadsinträdet i Bern, ett år efter Rising Star-utmärkelsen.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1246,1247],{"id":520,"title":521,"author":1262,"cta":494,"description":781,"hideInRecent":484,"layout":793,"meta":1263,"moment":798,"path":825,"stem":827,"tags":1265,"webcast":484},[523],{"lang":795,"date":798,"categories":1264,"blogtitlepic":801,"customExcerpt":803},[800],[829,830,831],{"id":1267,"title":1268,"author":1269,"cta":494,"description":1270,"hideInRecent":484,"layout":793,"meta":1271,"moment":1272,"path":1276,"stem":1277,"tags":1278,"webcast":484},"content_sv/posts/2026-07-22-isg-cybersecurity-2026.md","Leader och Rising Star. glueckkanja i ISG:s cybersecurity-studie 2026",[1026],"Ny i kvadranten och direkt Leader: ISG Provider Lens®-studien \"Cybersecurity – Services and Solutions 2026\" positionerar glueckkanja som Leader inom Next-Gen SOC/MDR Services för medelstora företag i Tyskland. I totalmarknaden för Next-Gen SOC/MDR Services utser ISG oss till Rising Star, alltså den leverantör som analytikerna tror kan ta steget in i Leader-kvadranten inom de närmaste 12 till 24 månaderna.",{"lang":795,"date":1272,"categories":1273,"blogtitlepic":1274,"customExcerpt":1275},"2026-07-22",[1240],"head-isg-cybersecurity-2026.png","ISG Provider Lens®-studien Cybersecurity 2026 utser glueckkanja till Leader i kvadranten Next-Gen SOC/MDR Services (Midmarket). I totalmarknaden för Next-Gen SOC/MDR Services är vi Rising Star. ISG intygar att vi har tillväxt över snittet, djup Microsoft-security-expertis och ett 24/7-SOC från Tyskland.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1246,1247,800],{"id":1280,"title":1281,"author":1282,"cta":494,"description":1283,"hideInRecent":484,"layout":793,"meta":1284,"moment":1285,"path":1288,"stem":1289,"tags":1290,"webcast":484},"content_sv/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: vad AI verkligen behöver för att arbeta",[1026],"Ett tillverkande företag vill veta vilka av dess 14 000 SKU:er som faktiskt är lönsamma. Svaret ligger i tre system som aldrig har utbytt en enda datapunkt med varandra. Fram till helt nyligen kostade det tre avdelningar, två veckor och en hel del god vilja att få fram det. Sedan början av 2026 kan en AI besvara den frågan på minuter: söka igenom data, upprätta samband, producera en rekommendation. Förutsatt att den har åtkomst.",{"lang":795,"date":1285,"categories":1286,"blogtitlepic":1287},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[829,131],{"id":1292,"title":1293,"author":1294,"cta":494,"description":1295,"hideInRecent":484,"layout":793,"meta":1296,"moment":1297,"path":1301,"stem":1302,"tags":1303,"webcast":484},"content_sv/posts/2026-07-01-onboarding-process.md","Kontraktet är påskrivet: så går din onboarding till hos oss",[1117],"Hur går egentligen er onboarding till? En fråga som möter oss gång på gång i samtal med sökande, för många har redan varit med om att en onboarding går knaggligt. Desto viktigare är det för oss att ge dig en bra känsla från början.",{"lang":795,"date":1297,"categories":1298,"blogtitlepic":1299,"customExcerpt":1300},"2026-07-01",[1240],"Onboarding_Blogheader","Kontraktet är påskrivet, det första stora steget är taget. Men hur går det vidare nu? Vi tar med dig bakom kulisserna på vår onboarding, från preboarding till första veckan i teamet.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1304,1305,1306],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1308,"title":1309,"author":1310,"cta":494,"description":1311,"hideInRecent":484,"layout":793,"meta":1312,"moment":1313,"path":1317,"stem":1318,"tags":1319,"webcast":484},"content_sv/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: vi hör till",[1026],"I Microsofts partnerekosystem finns en hel rad erkännanden, och ändå skiljer sig Frontier Partner Badge i sin uppläggning från de övriga utmärkelserna. Den går inte att ansöka om, utan tilldelas på Microsofts initiativ till en exklusiv krets av partner som måste övertyga i flera discipliner parallellt, i stället för att briljera i en enda. Microsoft prövar därvid påvisad kompetens inom Cloud & AI Platforms, inom AI Business Solutions och inom Security på lika villkor, och vänder sig därmed till företag som inte uppfattar AI som ett påhäng på befintlig IT, utan som resultatet av en genomgående arkitektur som bär från identiteten via endpointen ända in i produktiv AI-drift.",{"lang":795,"date":1313,"categories":1314,"blogtitlepic":1315,"customExcerpt":1316},"2026-06-26",[1240],"head-frontier-partner-badge.jpg","Sedan en tid tillbaka finns det en ny topputmärkelse i Microsoft AI Cloud Partner Program, Frontier Partner Badge. Microsoft tilldelar den uteslutande till en exklusiv krets av partner världen över som levererar bärkraftiga AI-projekt på hela Microsoft-stacken, från arbetsplatsen via molnplattformen och security ända in i själva AI-tillämpningen, och som har bevisat den ambitionen i praktiken. I DACH-området räknar den här gruppen bara en handfull företag, och vi är ett av dem.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1246,1320,829],"Microsoft Partner",{"id":1322,"title":1323,"author":1324,"cta":494,"description":1325,"hideInRecent":484,"layout":793,"meta":1326,"moment":1327,"path":1331,"stem":1332,"tags":1333,"webcast":484},"content_sv/posts/2026-06-09-vair-run.md","160 kilometer för ett gott ändamål",[1124],"Söndag morgon, klockan 8:30, Holbeinsteg vid Main. Elva kollegor i enhetliga NinjaCat-tröjor, redo för Frankfurter Runden. Regn, blixt och åska inkluderat. Att springa för ett gott ändamål var motivation nog för att snöra på löparskorna trots det dåliga vädret.",{"lang":795,"date":1327,"categories":1328,"blogtitlepic":1329,"customExcerpt":1330},"2026-06-08",[1240],"frankfurter-runden.png","Elva kollegor, 16 varv, 160 kilometer, ett åskoväder och en pallplats: glueckkanja var med på Frankfurter Runden 2026 och skänkte pengar till VAIR e.V. för varje sprunget varv. Föreningen bygger en inkluderande sport- och kulturpark i Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1334,1304,1335],"Top Arbeitgeber","Soziales Engagement",{"id":1337,"title":1338,"author":1339,"cta":494,"description":1340,"hideInRecent":484,"layout":793,"meta":1341,"moment":1342,"path":1346,"stem":1347,"tags":1348,"webcast":484},"content_sv/posts/2026-04-10-incident-to-intelligence.md","Anatomin hos en okänd AMOS Stealer: Från larm till immunitet på timmar",[1105],"När ett larm utlöses i vårt SOC börjar klockan ticka: inte bara för den drabbade kunden, utan för alla organisationer under vårt skydd. Det farligaste ögonblicket i dagens hotlandskap är the Intelligence Gap, tidsfönstret mellan den första användningen av en ny malware-variant och den dag branschen får kännedom om den.",{"lang":795,"date":1342,"categories":1343,"blogtitlepic":1344,"customExcerpt":1345},"2026-04-10",[800],"head-amos-stealer.png","En hittills odokumenterad AMOS-Stealer-variant komprometterade en macOS-endpoint. Inga kända hashvärden, inga C2-data i offentliga databaser. Vårt SOC monterade ner sex obfuskeringslager, extraherade alla indikatorer och distribuerade skyddet till alla SOC-kunder inom timmar, innan branschen ens hade sett samplet.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1349,1350,1351,1352,1353],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1355,"title":1356,"author":1357,"cta":494,"description":1358,"hideInRecent":484,"layout":793,"meta":1359,"moment":1360,"path":1363,"stem":1364,"tags":494,"webcast":484},"content_sv/posts/2026-03-21-microsoft-edge-corporate-browser.md","Därför bör Edge vara er enda Corporate Browser",[896],"Valet av webbläsare är i företagsmiljöer ett strategiskt beslut: det påverkar direkt hur mycket säkerhet och administrativ börda ni faktiskt har. Google Chrome var länge det närliggande alternativet, men Microsoft Edge har utvecklats till en webbläsare som griper direkt in i den befintliga stacken, framför allt när Microsoft 365 används och administrationen sker via Intune.",{"lang":795,"date":1360,"blogtitlepic":1361,"customExcerpt":1362},"2026-03-21","head-microsoft-edge-default-browser.jpg","Inget företag har egentligen valt Chrome; den fanns bara där, med egen synklogik, egen kontohantering, eget policygränssnitt. Microsoft Edge däremot griper direkt in i den infrastruktur som ändå redan är igång: Entra ID, Intune, Defender. Det här inlägget visar hur bytet ser ut, hur Chrome via en Intune-policy omdirigeras till en landningssida och vad som faller bort när man slutar köra två webbläsare parallellt.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1366,"title":1367,"author":1368,"cta":494,"description":1369,"hideInRecent":484,"layout":793,"meta":1370,"moment":1371,"path":1375,"stem":1376,"tags":1377,"webcast":484},"content_sv/posts/2026-03-20-stryker-attack-intune-privilege.md","Ett adminkonto var allt som krävdes.",[523],"Onsdag den 11 mars 2026. Medarbetare på Strykers kontor i 79 länder slog på sina datorer och fann dem tomma. Inloggningsskärmar ersatta med en logotyp. Företagsdatorer, tjänstemobiler, privata enheter som var registrerade i företagets BYOD-program – alla raderade samtidigt, över natten. Ingen ransomware, inga signaturer för skadlig kod, ingenting som ett endpoint-detection-verktyg hade kunnat upptäcka.",{"lang":795,"date":1371,"categories":1372,"blogtitlepic":1373,"customExcerpt":1374},"2026-03-20",[800],"head-stryker.jpg","Den 11 mars 2026 raderade Handala enheter i 79 länder, och allt som krävdes för det var ett komprometterat Intune-adminkonto. Ingen skadlig kod, ingen exploit, bara legitima hanteringsverktyg vända mot sina ägare. Vad som hände, varför det fungerade och vilka två arkitektoniska luckor som måste stängas.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1230,831],{"id":1379,"title":1380,"author":1381,"cta":494,"description":1382,"hideInRecent":484,"layout":793,"meta":1383,"moment":1384,"path":1388,"stem":1389,"tags":1390,"webcast":484},"content_sv/posts/2026-03-16-ai-agent-hackathon.md","Sex Agents. Fyra veckor. Skarp drift.",[1026],"Hur många timmar per vecka lägger er IT-avdelning på uppgifter som en agent skulle kunna klara på minuter?",{"lang":795,"date":1384,"categories":1385,"blogtitlepic":1386,"customExcerpt":1387},"2026-03-16",[1240],"head-ai-agent-hackathon.jpg","Sex företag, fyra veckors byggfas, sex fungerande AI Agents – det var den första glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa och lila logistik byggde i Copilot Studio agents som idag körs i produktion. Vad som blev resultatet och hur formatet fungerar.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[829,1391,1392,1393],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1395,"Fritz Zurhorst":1396,"Nadine Klein":1397,"Jan Geisbauer":1398,"Carolin Kanja":1402,"Anna Ulbricht":1403,"Annette Brauns":1404,"Pascal Asch":1405,"Steffen Schwerdtfeger":1406},{"display_name":865,"avatar":866,"permalink":867,"twitter":868,"linkedin":869,"imageOffsetTop":870,"imageOffsetLeft":871},{"display_name":839,"avatar":840,"permalink":841,"linkedin":842,"imageOffsetTop":843},{"display_name":859,"avatar":860,"permalink":861,"twitter":862,"linkedin":863,"imageOffsetTop":843},{"display_name":523,"avatar":1000,"permalink":1001,"twitter":1002,"linkedin":1002,"imageOffsetTop":843,"socials":1399},[1400,1401],{"text":1005,"href":1006},{"text":1008,"href":1009},{"display_name":1026,"avatar":1027,"permalink":1028,"twitter":1029,"linkedin":1030},{"display_name":1117,"avatar":1118,"permalink":1119,"linkedin":1120,"imageOffsetTop":1121,"imageOffsetLeft":1122},{"display_name":1124,"avatar":1125,"permalink":1126,"linkedin":1127,"imageOffsetTop":1128,"imageOffsetLeft":870},{"display_name":1105,"avatar":1106,"permalink":1107,"linkedin":1108,"imageOffsetTop":943},{"display_name":896,"avatar":897,"permalink":898,"linkedin":899,"twitter":900,"imageOffsetTop":901,"imageOffsetLeft":902},{"id":834,"extension":835,"meta":1408,"stem":8,"__hash__":1186},{"Jan Geisbauer":1409},{"display_name":523,"avatar":1000,"permalink":1001,"twitter":1002,"linkedin":1002,"imageOffsetTop":843,"socials":1410},[1411,1412],{"text":1005,"href":1006},{"text":1008,"href":1009},1791383950988]