All news in category “Vendor and Hyperscaler Watch”

🔁 Amazon DynamoDB multi-Region strong consistency (MRSC) global tables now integrate with AWS Fault Injection Service (FIS), enabling teams to run controlled experiments that pause regional replication to observe application behavior. You can create realistic regional-failure scenarios to validate monitoring, recovery, and resiliency mechanisms. This capability helps tune alarms, failover logic, and operational runbooks before real outages occur. Support is available in multiple AWS Regions and documentation outlines how to get started.

🔒 CrowdStrike has been named a Customers’ Choice in the 2026 Gartner Peer Insights Voice of the Customer for Endpoint Protection Platforms report. The Falcon platform earned the most 5‑star ratings (592) and a 97% Willingness to Recommend score from roughly 800 responses, reflecting strong product capabilities and deployment experience. CrowdStrike credits its AI‑native architecture and recent innovations—APEX, remote ransomware prevention, automated leads, Malware Analysis Agent, and Charlotte Agentic SOAR—for improving detection, reducing false positives, and automating response workflows.

🤖 Chrome Enterprise presents the browser as an intelligent, agentic workspace that automates multi‑step tasks and integrates Google’s Gemini models directly into the user experience. It emphasizes enterprise controls—such as enhanced DLP (real‑time copy/paste restrictions, data masking, dynamic watermarking) and per‑group AI feature management—to prevent data leakage and limit access to unapproved generative tools. Chrome also adds a double‑check review system and strict site scoping for agent actions, aiming to balance productivity gains with robust security protections.

🔐 Palo Alto Networks announced Quantum-Safe Security, a continuous solution to discover, assess and remediate enterprise cryptographic risk as organizations migrate to post-quantum standards. The offering ingests telemetry from PAN-OS NGFW, Prisma Access and third-party systems to build a real-time Cryptographic Bill of Materials (CBOM), prioritize harvest-now, decrypt-later exposure, and automate remediation—including cipher translation at the network edge. General availability is expected on January 30, 2026.

🔧 AWS now lets you edit job names and descriptions in AWS Deadline Cloud after submission, making it easier to organize and identify render and compute jobs. Previously immutable metadata can now be corrected or augmented post-submission to reflect shot numbers, sequence IDs, or internal tracking. Edits are available via the AWS SDK, the Deadline client, and Deadline Monitor, enabling both manual updates and scripted automation for pipeline workflows.

🔍 AWS Network Firewall now provides web category–based filtering and visibility into generative AI (GenAI) application traffic. Administrators can reference pre-defined URL categories—such as GenAI services, social media, and streaming—to allow, block, or log traffic via stateful rule groups. When combined with TLS inspection, the service can inspect full URL paths for granular control. The feature is available across AWS commercial regions.

🔒 This post demonstrates a serverless file integrity monitoring (FIM) pattern using AWS Systems Manager Inventory, Amazon S3, Lambda, and Amazon Security Lake. It collects file metadata from EC2 instances, exports versioned inventory objects to S3, and uses S3 Put events to trigger a Lambda that compares current and previous inventory versions to detect created, modified, or deleted files. When unauthorized changes are found, the function generates ASFF findings in AWS Security Hub, which Security Lake ingests and normalizes for query and visualization via Athena, QuickSight, or OpenSearch.

🖨️ AWS announced advanced printer redirection for Amazon WorkSpaces Personal, enabling Windows users to access full device-specific printing features—double-sided printing, paper tray selection, finishing (stapling, hole-punching) and color management—directly from their virtual desktops. The feature supports configurable driver validation modes (exact, partial, or name-only) so administrators can balance compatibility and capability, and it automatically falls back to basic printing when matching drivers are not found. Available in all Regions offering WorkSpaces Personal, it requires WorkSpaces Agent 2.2.0.2116+ and Windows client 5.31+, with matching printer drivers installed on both the WorkSpace and client device.

🚀 Dataflow now broadens ML infrastructure with new accelerator and provisioning options to support batch and streaming workloads. It adds support for H100 and H100 Mega GPUs and TPU V5E, V5P, and V6E, plus reservation capabilities and a flex-start provisioning model via the Dynamic Workload Scheduler. ML-aware streaming autoscaling and right fitting heterogeneous worker pools aim to improve throughput and reduce cost for inference and streaming ML jobs.

🚀 Amazon Web Services has made R6id memory-optimized database instances generally available for Amazon RDS running PostgreSQL, MySQL, and MariaDB in the Tel Aviv region. R6gd instances are now supported for the same engines in Asia Pacific (Osaka) and EU regions (Spain, Zurich). Graviton2-based instances can deliver up to 40% better performance than R5 equivalents, while R6gd adds local NVMe block storage and R6id offers 58% more TB per vCPU and approximately 15% improved price-performance versus R5d. Instances can be launched via the RDS console or AWS CLI; consult the RDS/Aurora documentation for engine-version support and the pricing page for regional costs.

🔧 AWS Marketplace now supports a self-service listing flow for sellers publishing Amazon Machine Image (AMI) products that include FPGA images. Sellers can create and manage up to 15 Amazon FPGA images via a new UI or programmatically through the AWS Marketplace Catalog API, with inline validation and step-by-step guidance. The change removes the prior Product Load Form dependency and speeds time-to-market for FPGA-based accelerators on supported Amazon F2 instance types.

🏆 Microsoft honored partners and individuals at a Redmond ceremony on January 26, 2026, presenting the 2026 Security Excellence Awards to recognize innovation and collaboration across the security ecosystem. Winners included Avertium, BlueVoyant, Tata Consultancy Services, Illumio, Invoke LLC, and individual winner Anna Bordioug (Protiviti). Finalists were chosen by a judging panel and winners selected by Microsoft and MISA member votes, with judges spotlighting AI-driven threat intelligence and Zero Trust adoption as key drivers of improved customer security outcomes.

🔒 The Android Security Team announced a set of theft protection updates designed to make devices harder targets for criminals. Available on devices running Android 16+ and recovery tools on Android 10+, the changes add a dedicated toggle for Failed Authentication Lock, expand Identity Check coverage to all apps using the Biometric Prompt, and increase lockout times while preventing identical repeated guesses from counting toward retries. Remote Lock gains an optional security challenge, and new devices activated in Brazil will ship with Theft Detection Lock and Remote Lock enabled by default.

🔒 Meta announced a new Strict Account Settings mode on WhatsApp to protect high-risk users such as journalists and public figures by locking accounts to their most restrictive options. The mode, available under Settings > Privacy > Advanced, blocks attachments and media from unknown senders, silences unknown callers, and restricts additional features to reduce attack surface. Meta said the controls will roll out gradually over the coming weeks. The company also highlighted a global rollout of a Rust-based media library, wamedia, and other memory-safety hardening efforts to guard against spyware and memory corruption.

🔒 Amazon Connect Cases now supports tag-based access control, enabling administrators to attach tags to case templates and restrict which users can view or manage cases based on security profiles. For example, teams can tag fraud cases and limit view/edit rights to users assigned to a fraud security profile. This capability strengthens enforcement of internal controls and data access policies, simplifies segmentation of sensitive workflows, and reduces the risk of unauthorized access across supported AWS regions.

🔒 Cloudflare ported a Matrix homeserver to Cloudflare Workers as a proof-of-concept, combining edge execution with built-in post-quantum TLS to reduce operational burden. The implementation remaps traditional components — Postgres to D1, Redis to KV, filesystem to R2, and coordination to Durable Objects — to provide strong consistency where needed and near-zero idle cost. End-to-end encryption remains client-side via Megolm, so Workers terminate TLS but only handle ciphertext. The result is a low-latency, easy-to-deploy homeserver with automatic DDoS protection and request-based pricing.

🔒 Cloudflare describes a proof-of-concept Matrix homeserver implemented on Cloudflare Workers, porting core logic from Synapse to a TypeScript service. By mapping Postgres to D1, Redis to KV, filesystem to R2, and coordination to Durable Objects, the architecture removes much of the traditional operational burden. The Worker preserves full Matrix E2EE (Megolm) while TLS automatically negotiates a post-quantum hybrid key agreement (X25519MLKEM768), delivering lower latency, usage-based cost scaling, and global distribution.

🚀 This article demonstrates a full-stack architecture that uses Flutter for the web frontend and Dart for the backend, enabling shared models and business logic across client and server. It walks through a To-Do example that places the domain model in a shared package, uses Shelf to serve both API routes and static web files, and compiles the server to a native executable for fast startup. Deployment options include Cloud Run's OS-only runtime for mounting precompiled artifacts or a Dockerfile-based multi-stage build for portable containers, and the article includes CI guidance using GitHub Actions to automate analysis, tests, and web builds.

🔒 This CNAPP buying guide outlines the cloud-native application protection category, its core components and expanded coverage areas. It explains the four foundational elements—CIEM, CWPP, CASB and CSPM—and highlights extensions such as IaC, container, API and supply-chain security. The guide compares major vendors, their focal points, notable integrations and pricing models, and concludes with five practical questions organizations should ask before buying.

🔔 Amazon Lightsail now offers new Node.js, LAMP, and Ruby on Rails blueprints that enforce IMDSv2 by default and support IPv6-only instances. With a few clicks you can create a Lightsail VPS of your preferred size with the selected stack preinstalled; bundles include an operating system, storage, and a monthly data transfer allowance. The new blueprints are available in all AWS Regions where Lightsail is offered.