All news in category “Vendor and Hyperscaler Watch”

📢 AWS Systems Manager now supports sharing Systems Manager Documents (SSM Documents) with an entire AWS organization or specific OUs using AWS Resource Access Manager (AWS RAM). Previously limited to public or per-account sharing, this update lets you create an AWS RAM resource share, select SSM Documents and target organizations or OUs, and have access automatically kept in sync as accounts change. Sharing uses standard AWS authorization and resource-based policies, and external accounts receive an invitation they must accept. The feature is available in the console, AWS CLI, and SDKs across all Regions where Systems Manager is offered, with no additional charge.

🔒 The long-standing assumption that operational technology (OT) is safe due to physical isolation is no longer valid. Integration of OT with IT and cloud has exposed nearly 20 million OT assets online, increasing risk and making operational resilience a strategic concern. Modern industrial environments require continuous verification, micro-segmentation, and governance to protect safety, availability, and business continuity.

🔒 Amazon ElastiCache Serverless for Valkey now supports public endpoints, enabling direct connections from laptops, serverless functions, or external applications without VPNs or bastion hosts. A public endpoint creates a managed, internet-reachable cache with no VPC configuration and can be provisioned in under a minute. Connections use IAM authentication over TLS 1.3, eliminating stored passwords; clients use Valkey GLIDE 2.2+ or the Developer Toolkit for token management. Public endpoints are available in all commercial and China AWS Regions with standard pricing.

🔔 Microsoft showcased Fabric and SQL innovations at FabCon and SQLCon 2026 in Barcelona, highlighting integrations across Microsoft Copilot, Fabric IQ, Power BI agentic apps, and OneLake. The announcements include Fabric IQ in Copilot, agentic app creation in Power BI Desktop, Fabric Apps enhancements for developers, and IQ sharing for governed data collaboration. These updates aim to ground AI in trusted business context and speed production-ready app development.

🔒 Nvidia unveiled the Open Agent Safety Platform, combining OpenShell software with DPU-based silicon in a reference design to secure agentic AI from testing through deployment. The platform uses NVIDIA Sentry on BlueField-4 DPUs to monitor and enforce policies out-of-band, while OpenShell provides a secure runtime boundary on Vera CPUs and can be extended to other platforms. Partners include major vendors and financial firms, though notable hyperscalers are absent. Analysts praise the hardware-enforced controls but warn they only cover agents running inside the governed runtime and cannot address unknown or external agents.

🔒 Amazon Route 53 Resolver DNS Firewall now supports Palo Alto Networks Advanced DNS Security and is generally available across 32 AWS Regions. The integration lets security teams detect and block malicious DNS traffic from VPCs and hybrid environments using PANW threat rules without deploying separate firewalls or changing VPC setups. Administrators can subscribe via the Route 53 DNS Firewall console, share licenses with AWS License Manager, and associate rule groups using RAM, Route 53 Profiles, or AWS Firewall Manager.

🔔 Amazon EC2 Future-dated Capacity Reservations let you secure capacity up to 120 days ahead by specifying capacity, start date, and commitment duration. You can now postpone a reservation start date if plans change; EC2 provides a quote showing the updated start date and any adjusted commitment duration. After you accept the quote, EC2 updates the reservation with the new start date. The feature is available to all Future-dated Capacity Reservation customers; check regional availability in AWS documentation.

🔍 Amazon Rekognition Face Liveness now provides Feedback Codes in the GetFaceLivenessSessionResults response to explain why a liveness check scored low and how users can retry successfully. The codes identify specific issues such as poor lighting, face obstruction, closed eyes, or low video quality, and a single session can return multiple codes to guide comprehensive corrections. This update targets identity verification, re-authentication, and accessibility use cases.

🛡️ The AWS European Sovereign Cloud will run an exercise on October 24, 2026, demonstrating it can operate without using the AWS Global Network backbone or any non-EU infrastructure. The EU-based operational team will execute the test using only in-EU hardware and software, routing traffic over European ISPs and disabling dedicated global systems to validate independent operation. Customers should expect brief convergence-related connectivity interruptions, but no service availability impact within the sovereign cloud or other AWS Regions.

🧭 This article argues that startups benefit from a compound AI stack that pairs frontier models for complex tasks with compact open models for routine, high-volume workloads. It introduces Gemma 4 — an Apache 2.0 licensed family of efficient open models spanning multiple sizes and architectures — and explains deployment options from on-device to cloud. The piece highlights real-world founder use cases, cost and latency improvements, and practical guidance for integrating Gemma alongside Gemini in production.

🛰️ Google Earth Engine now integrates Gemini AI via a new Ask feature in the Code Editor, enabling users to write, debug, and optimize geospatial scripts using their own Gemini API key. Ask understands the active script, imported assets, geometries, and session history to provide context-aware code suggestions, explanations, diffs, and merges. Users can choose from Gemini models, search docs or datasets, or ground results with Google Search. Ask is available globally and requires a Gemini API key to enable.

🔄 Azure has published a formal Virtual Machine lifecycle policy to give customers clear, predictable guidance on VM platform generations and transitions. The policy defines four stages—Current, Extended, End of Life, and Retired—each with recommended customer actions, Microsoft investment levels, regional availability, and purchasing implications. Azure will provide notifications, tooling, and AI-augmented guidance to help customers plan and execute modernization with confidence.

🤖 AWS GovCloud (US) now offers Claude Sonnet 5.5, a smarter and more efficient model that improves coding and knowledge-work performance at lower cost per task and faster speeds. Sonnet 5.5 is an upgrade from Sonnet 5, better suited for coding workflows like building, fixing, and verifying features, and for producing shareable outputs such as 1‑pagers, diagrams, slides, document edits, and spreadsheet cleanup. Available via Amazon Bedrock, Sonnet 5.5 keeps data within AWS infrastructure, supports regional data residency, and is accessed through a unified service with AWS-managed features like Guardrails and Knowledge Bases.

🔒 Turning on a VPN on your router protects every device on your home network automatically, eliminating per-device setup and covering gadgets that can’t run VPNs themselves. A router-based VPN counts as a single device against subscription limits, reduces battery and CPU load on client devices, and can enforce an “always-on” protection model with a router-level kill switch. It also simplifies managing server or protocol changes and allows nested corporate and personal VPNs. Trade-offs include potential compatibility issues with services that block VPNs and the need for a router that supports VPNs or additional setup like dual-network or split-tunneling configurations. Kaspersky VPN supports OpenVPN and WireGuard and provides router configuration guides.

🚀 Vinext 1.0 general availability brings a Vite-backed framework that makes Next.js apps portable to multiple platforms including Cloudflare Workers, Netlify, and AWS Lambda. The release improves compatibility, stability, and caching, supports both App and Pages routers, and adds build-time prerendering plus page-level ISR. Migration is simplified with two commands and a broad test suite ensures ongoing compatibility with Next.js.

🚀 Cloudflare today announced cf, a new CLI designed to give agents access to the full Cloudflare API surface of over 3,000 operations. Built on the Forge API generation pipeline and TypeScript-based configuration, cf defaults to JSON output, adds natural-language CLI search, and integrates Vite for modern Worker development. The open beta is available globally via npm.

📊 Cloudflare today announced the release of BEACON, an anonymized dataset of billions of real-user performance measurements across 10,000 top websites. BEACON follows the RUM Archive standard, reports Core Web Vitals as full histograms, and is updated daily in Google BigQuery. The dataset breaks down metrics by browser engine, device, country, and industry, and includes queries and examples to aid researcher analysis.

🚀 Today Cloudflare launched an experimental preview adding first-class support for the Rust wasm32-unknown-emscripten target in the wasm-bindgen toolchain and Rust Workers. This enables improved native Rust and Tokio-based applications to run on Workers, Node.js, and the web, increasing library compatibility and enabling examples like a Rust-native Minecraft server running in a Durable Object. The preview includes patches and examples, with upstream collaboration across Google, wasm-bindgen, Emscripten, and Tokio maintainers.

🚀 Over the four months since joining Cloudflare, VoidZero has shipped 80+ releases, closed over 1,200 issues, and delivered major performance wins across its toolchain. Vite+ reached 1.0, and work on a new "Bundled Dev" mode aims to speed development for very large web apps. The team shipped the Oxc React Compiler and improvements across Vitest, Oxlint, and Oxfmt, while Cloudflare doubled its open source funding commitment.

🚀 EmDash 1.0 is now available as a stable, free, and open source CMS built on Astro, aimed at powering production sites, agency platforms, and hosting experiences. The release includes editorial, media, localization, migration, and deployment workflows, and introduces a decentralized plugin registry based on the AT Protocol. Publishers retain control of identities and releases while site owners can discover and install sandboxed plugins with explicit capability permissions.