All news in category “Vendor and Hyperscaler Watch”

⏱ Attackers discover and target newly public assets within minutes, not days. Continuous internet scanners such as Shodan and Censys catalog open ports and banners within the hour, and automated tooling performs enumeration, credential stuffing, and active probing over the next 12 hours. Sprocket Security’s ASM Community Edition highlights how hidden APIs and misconfigurations are frequently exposed and why human validation is required to prioritize remediation.

🔒 Cloudflare has made post-quantum encryption generally available for Cloudflare IPsec using hybrid ML‑KEM (FIPS 203), implementing draft-ietf-ipsecme-ikev2-mlkem. The rollout enables site-to-site WAN tunnels protected against harvest-now-decrypt-later attacks and has been tested interoperably with Cisco and Fortinet branch connectors. This brings post-quantum IPsec closer to Internet-scale deployment and supports Cloudflare’s goal of full post-quantum security by 2029.

🔒 Palo Alto Networks' Unit 42 is expanding its Frontier AI Defense service through a new partnership with Armadin, the offensive security firm founded by Kevin Mandia. The collaboration introduces an autonomous External AI Hyperattack Assessment that passively discovers internet-facing assets, then deploys a coordinated swarm of AI attack agents to validate exposures and exploit vulnerabilities in parallel. Unit 42 says this pressure-tested, decision-grade evidence accelerates remediation and helps organizations reduce AI-enabled external attack risk across cloud and perimeter environments.

🤖 Agents can now provision Cloudflare resources and complete billing through Stripe Projects, enabling end-to-end deployment without manual dashboard steps. Using a co-designed protocol, an agent can discover available services, create or link a Cloudflare account, and receive API credentials to deploy code and register domains. Stripe supplies a payment token (not raw card data) with a default $100/month cap, and human approval can be requested when needed. Any platform with signed-in users can adopt the same orchestration flow.

🚀 AWS Lambda now supports creating serverless applications with Ruby 4.0. Developers can use Ruby 4.0 as both a managed runtime and a container base image, and AWS will automatically apply updates to the managed runtime and base image as they become available. The runtime adds advanced logging controls including JSON structured logs, configurable logging levels, and the ability to target specific Amazon CloudWatch log groups. Ruby 4.0 is available in all AWS Regions, including China and AWS GovCloud (US).

🛡️ Check Point has earned GovRAMP Authorization for the Check Point Infinity Platform for Government, extending its cloud security offering to U.S. federal, state, local, and tribal agencies. This follows its 2025 FedRAMP Authorization and is backed by prevention-first capabilities that ranked #1 in Miercom’s 2026 assessment. The authorization provides a vetted, consistent cybersecurity framework to support public-sector procurement and deployment. Organizations can expect unified protection with high effectiveness against phishing and AI-powered malware.

🧩 Amazon Quick has introduced preview Microsoft 365 extensions for Excel, PowerPoint, and Word that let the service perform tasks directly inside users’ Microsoft 365 environments. The Excel extension supports complex spreadsheet analysis including pivot tables, charts, and data import/cleaning. PowerPoint enables template-driven deck creation and refinement from Quick data, while Word gains formatted document generation, sweeping edits with track changes, and reviewer participation in comments. The extensions are available in multiple AWS regions for early access.

🔒 Amazon OpenSearch Service now supports index-level encryption using AWS Key Management Service (KMS) customer managed keys. This allows you to assign different customer managed keys to individual indexes on the same domain, enabling more granular, tenant-specific encryption policies and isolating encrypted data across indexes. The capability builds on existing domain-level encryption and is available at no additional cost for domains running OpenSearch 3.3 or later in select AWS Regions.

🚀 Amazon RDS for MySQL now supports the community MySQL 9.6 Innovation Release in the Amazon RDS Database Preview Environment. You can deploy MySQL 9.6 as fully managed Single‑AZ or Multi‑AZ instances on the latest-generation instance classes to evaluate new features, bug fixes, and security patches. Preview instances are retained for a maximum of 60 days and snapshots created there can only be used within the Preview Environment. Pricing for preview instances aligns with production RDS in the US East (Ohio) Region.

🚀 Amazon DocumentDB (with MongoDB compatibility) is now available in the Canada West (Calgary) region. This fully managed, native JSON database delivers automatic storage scaling up to 128TiB, support for up to 15 low‑latency read replicas, and native integrations with AWS services such as AWS DMS, Amazon CloudWatch, AWS CloudTrail, AWS Lambda, and AWS Backup. You can create clusters via the AWS Management Console, CLI, or SDK to support mission‑critical document workloads at scale.

🚀 Amazon CloudFront now supports invalidation by cache tag, letting teams remove groups of related cached objects at edge locations with a single request. Developers add a configurable response header with comma-separated tag values and can assign multiple tags per object for precise control. This reduces reliance on URL lists or broad wildcards and helps preserve cache hit ratios while ensuring fresh content quickly.

🤖 AWS has added Google DeepMind's instruction‑tuned Gemma 4 E4B, Gemma 4 26B‑A4B, and Gemma 4 31B to SageMaker JumpStart, making multimodal foundation models directly accessible to AWS customers. The models offer configurable step‑by‑step reasoning, interleaved text and image inputs, video and image understanding, native function calling, and multilingual support across 140+ languages. Gemma 4 E4B also supports audio input for ASR and speech‑to‑translated‑text workflows. Customers can deploy these models via SageMaker Studio or the SageMaker Python SDK for rapid experimentation and production.

🆕 Amazon SageMaker JumpStart now includes paraphrase-multilingual-MiniLM-L12-v2, Microsoft Table Transformer Detection, and Bielik-11B-v3.0-Instruct. The MiniLM model maps sentences to 384-dimensional dense vectors across 50+ languages for cross-lingual semantic search, multilingual clustering, and sentence similarity scoring. The Microsoft Table Transformer is a DETR-based detector trained on PubTables-1M to locate tables in PDFs and scanned images for document digitization. Bielik-11B offers an 11B-parameter multilingual generative model focused on Polish and 32 European languages for dialogue, STEM reasoning, and enterprise NLP.

🔧 Amazon CloudWatch now provides a visual configuration editor for the CloudWatch agent directly in the Amazon EC2 console, eliminating the need to hand-edit JSON. You can graphically build agent configurations, select metrics, log sources, and deployment targets, then deploy with a single click. From the EC2 console you can install the agent on one or more instances, create tag-based policies for automated fleet-wide management, and view agent status and health from each instance detail page. The feature is available in all AWS Commercial Regions at no additional cost; standard CloudWatch pricing applies for collected telemetry.

🤖 UKG built People Fabric to unify its legacy HCM and WFM systems into a single, real-time data and intelligence platform powered by AlloyDB for PostgreSQL and Google's Agentic Data Cloud. The platform establishes a canonical data model, ingests change streams via a custom CDC pipeline and Dataflow, and serves operational queries from AlloyDB while routing analytics workloads to BigQuery and tenancy metadata to Cloud SQL. The outcome is millisecond read-after-write behavior, native vector support for AI agents, and faster developer velocity across 126 application teams and thousands of database instances.

🚀 Google Cloud Next ’26 introduced an integrated AI stack for startups centered on Gemini Enterprise, an end‑to‑end agent lifecycle platform with an Agent Development Kit, Agent Studio, and production runtimes that support sub‑second starts and persistent memory. The Agentic Data Cloud and zero‑ETL features enable cross‑cloud data access and high‑accuracy text‑to‑SQL to avoid costly migrations. Infrastructure updates (TPU 8t/8i, Axion N4A, new networking machines, and GKE sandboxes) plus agentic security integrations and a $750M partner fund aim to accelerate prototyping, secure production deployments, and enterprise go‑to‑market.

🚀 Amazon Bedrock now includes OpenAI GPT OSS (120B and 20B) and NVIDIA Nemotron models (Nano 9B v2, Nano 12B v2, Nano 30B, Super 120B), enabling developers to access open-weight foundation models through a single API. The integration is powered by Mantle, a distributed inference engine that provides serverless, high-performance inference, unified capacity pools, automated quota management, and OpenAI API compatibility. These models are available on AWS GovCloud (US) for compliant, enterprise-grade deployments.

📊 Amazon QuickSight now supports custom sort for filter controls, letting authors control how dropdown and list values are ordered instead of relying on alphabetical sorting. Custom sort applies to dropdown and list controls in single- and multi-select modes and supports ascending, descending, or fully custom orders for manually entered values. For dataset-backed controls authors can sort by the bound column or by another field using aggregations like Sum, Average, Count, Min, and Max, enabling business-driven ordering such as priority levels or revenue-ranked categories.

🔧 AWS updated the Transfer Family Terraform module to include end-to-end examples demonstrating integration with Okta and Microsoft Entra ID as custom identity providers. Built on the open-source Custom IdP solution and example repositories, the module automates deployment of Transfer Family endpoints while leveraging existing identity infrastructure. Included security controls—MFA, audit logging, and per-user IP allowlisting—help organizations meet operational and compliance requirements; consult the Terraform Registry and the Transfer Family Custom IdP user guide for implementation details and regional availability.

🔒AWS says long-standing infrastructure and cryptographic choices position it to address emerging AI and quantum threats. The company highlights the Nitro hardware platform — enabled by a 2015 semiconductor acquisition and deployed from 2017 — to provide strong isolation, confidential compute, and a 'zero humans' maintenance model. By favoring symmetric cryptography in KMS (launched 2013) and adding S3 controls like an 'active defense' that returns 'Bucket not found', AWS argues most customer data will not require immediate mass re-encryption while it pursues public-certificate post-quantum authentication by 2028–2029.