All news in category “Vendor and Hyperscaler Watch”

🔍 AWS announces new AgentCore optimization capabilities that turn production traces into continuous agent improvements. The features surface failure, intent, and trajectory insights across sessions to reveal silent and recurring failures, then generate data-grounded recommendations for prompts and tool descriptions. Batch evaluation and A/B testing validate fixes against defined metrics before rollout, and capabilities work across AgentCore runtime, Lambda, EKS, and non-AWS environments.

🔍 Today AWS announced a preview of business context and semantic search for AWS Glue Data Catalog, enabling discovery of data by semantic meaning. You can enrich catalog tables with glossary terms, custom metadata fields, and add skills that provide agents with additional context. The new Glue Search API lets you find tables by both structure and attached business meaning, and MCP-compatible agents can use the aws-data-analytics plugin to integrate with minimal setup.

🔒 Today, AWS announces AWS Continuum, which discovers, prioritizes, validates, and remediates security risks at machine speed within guardrails you define. It ingests findings from existing tools and its own scans, builds an environment-aware context graph to prioritize issues, validates exploitability with reproducible proofs in isolated sandboxes, and applies fast, reversible mitigations followed by durable fixes. Continuum integrates with services like Amazon GuardDuty and AWS Security Hub, and previews include Continuum penetration testing, code scanning, and automated threat modeling in STRIDE format.

🛠️ Oracle Autonomous AI Database Serverless (ADB-S) is now available on Oracle Database@AWS through AWS Marketplace with Bring Your Own License and License Included options. ADB-S runs on Exadata infrastructure as a fully managed service that automates patching, tuning, scaling, backups, and high availability. It supports four workload types—AI Transaction Processing, AI Lakehouse, AI JSON Database, and Oracle APEX—with independent compute and storage scaling. Integrations include AWS KMS for encryption, Amazon CloudWatch for monitoring, and Amazon EventBridge for events.

🔒 AWS Secrets Manager introduces a secret safety skill in the aws-core plugin for the Agent Toolkit for AWS, enabling AI coding agents to use secrets without exposing values to models or session logs. The skill prevents models from requesting raw secret values and prompts developers to clarify intent while constructing commands that reference secrets. A child process resolves secret references at execution time, keeping plaintext secrets out of agent context and logs. The feature is available across supported agent harnesses and Regions where Secrets Manager is offered.

🚀 Amazon Bedrock Managed Knowledge Base is now generally available as a fully managed retrieval-augmented generation (RAG) service. The offering removes the need to manage vector databases, data pipelines, and retrieval infrastructure by handling ingestion, storage optimization, and advanced retrieval. It supports six native connectors—S3, SharePoint, Confluence, Google Drive, OneDrive, and a web crawler—with automatic syncing and managed vector storage tuned for price-performance. Native integration with Amazon Bedrock AgentCore provides auto-generated permissions and observability for agent deployments.

🔍 AWS Security Agent, now part of AWS Continuum, introduces an AI-powered threat modeling capability in public preview that automatically generates threat models from design documents or source code. The agent analyzes application architecture, data flows, and trust boundaries to identify threats across all six STRIDE categories and recommends mitigations. Developers can integrate the agent into IDEs such as Kiro and Claude Code for early design-phase assessments, while security teams can perform pre-deployment reviews. The feature is available in all regions supported by AWS Security Agent at no extra cost during the preview.

🔒 AWS Security Agent (now part of AWS Continuum) adds support for Kiro and Claude Code, enabling developers to trigger security scans directly from their development environment. The agent now validates code scanner findings by simulating exploits in a sandbox to provide proof of exploit, reducing false positives and improving prioritization. Integrations include GitLab.com, GitLab Self Managed, GitHub Enterprise, Bitbucket, and Confluence, and features are available in all supported regions.

📧 Microsoft’s benchmarking suggests Defender for Office 365 catches most malicious and spam email pre-delivery and removes nearly all threats that reach inboxes, with integrated partners adding negligible improvement. Experts caution against interpreting raw catch rates as proof that one-vendor stacks suffice, noting that small percentages can still represent high-impact incidents and that diverse tools and detection methods remain valuable.

🛡️ Amazon Bedrock Guardrails introduces the InvokeGuardrailChecks API, a resourceless endpoint that lets you apply individual safeguards at any step of agentic AI workflows without creating guardrail resources. The API returns numeric severity and confidence scores so you can set custom thresholds and actions — block, pass, retry, or log — per request. It supports content filters, prompt attack detection, and sensitive information filters and is available in multiple AWS Regions.

🔍 AWS Transform now provides a model-to-model migration custom transformation that evaluates generative AI workloads and generates a migration plan to Amazon Bedrock. The agent scans codebases to identify AI SDKs and models, collects migration requirements interactively, and maps models to Bedrock equivalents with cost comparisons and production-ready code changes. It preserves application architecture while recommending routing, caching, and Bedrock integrations for secure, consolidated deployment.

🔍 Amazon S3 Vectors now returns up to 10,000 similarity search results per query, a 100x increase from the prior limit. This larger topK helps applications retrieve a more comprehensive candidate set for multi-stage pipelines that perform reranking, aggregations, or deduplication. Use the latest AWS SDK and specify up to 10,000 results in QueryVectors; results are paginated so you can process the first page while additional pages are fetched. A small data-returned fee applies beyond the free 512 KB per query.

🛡️ Amazon Bedrock Guardrails now includes Automated Reasoning checks that use formal verification to mathematically validate AI model outputs. This capability targets hallucinations, policy violations, and ambiguous responses to improve trust and compliance. Available in Asia Pacific (Sydney), it complements existing regional availability and is accessible via the Amazon Bedrock console and SDK.

🔍 AWS Transform for mainframe now provides a connected, traceable reimagine workflow that takes organizations from portfolio assessment through code generation. The service identifies discrete business functions in z/OS COBOL and PL/I workloads, generates development-ready requirements, and produces traceable cloud-native code. Integrations with IDEs such as Kiro via MCP enable requirements and code to flow directly into developer environments with full auditability.

🛡️ Google has been named a Leader in the 2026 IDC MarketScape for Worldwide SIEM, reflecting investments in Google Security Operations that combine Mandiant expertise, automation, and integrated AI agents. The report highlights strengths such as agentic alert triage, vertical AI integration with Gemini, curated Mandiant detection content mapped to MITRE ATT&CK, and high-performance search over large data volumes. These capabilities aim to reduce analyst workload and accelerate detection and response.

🔐 AWS Sign-in now supports resource-based policies and resource control policies (RCPs) for the AWS Management Console. These policies let administrators restrict console sign-in to expected networks and are evaluated during sign-in and when the console session requests new credentials. Resource-based policies target individual AWS accounts while RCPs apply organization-wide via AWS Organizations. Administrators can combine these controls with AWS Management Console Private Access to manage allowed sign-in networks and account access across their environment.

🚀 Amazon Redshift has made RG instances, powered by AWS Graviton processors, generally available in Africa (Cape Town), Asia Pacific (Bangkok), and Mexico (Central). These Graviton-based instances deliver up to 4.2X better price-performance for data warehouse workloads, run up to 2.4x faster than prior RA3 instances, and cost 30% less per vCPU. Customers can provision rg.xlarge and rg.4xlarge nodes, upgrade from RA3, and benefit from built-in savings including incremental snapshot metering by unique data blocks and elimination of Redshift Spectrum scanning charges.

📌 This blog explains a structured approach to enterprise storage migration using Microsoft tools. It emphasizes planning, assessment, and choosing the right migration path based on data volume, connectivity, and downtime tolerance. Key solutions covered include Azure Migrate, Azure Storage Mover, Azure Data Box, and a preview Azure Copilot Migration Agent. The post illustrates phased strategies, real customer examples, and guidance for regulated and AI use cases.

🔍 Google is updating Looker Explore with integrated AI assistants and a refreshed interface to help users surface insights faster. The release includes ad hoc Quick Starts powered by Gemini models, a Conversational Analytics-powered Insight Assistant for natural-language prompts, and automatic translation of user descriptions into Looker Expression syntax. The UI improvements include a resizable field picker, contextual data table menus, visual pivots, and a redesigned Merge Query workflow with smart joins and higher row limits.

🔧 Google announces Brazos, a rack-mounted, closed-loop liquid-to-air cooling solution designed to enable high-density AI and HPC gear within traditional air-cooled data centers. Brazos separates the internal IT liquid loop from facility water, enabling one-rack-at-a-time deployment and avoiding costly chilled-water retrofits. The modular design features three cooling units, integrated rack manifolds, and hot-swappable FRUs for field serviceability, and it fits OCP ORv3 form-factor racks. Google plans to open-source Brazos specifications and encourage industry adoption through forums like the Open Compute Project.