All news in category “Vendor and Hyperscaler Watch”

🔍 Fortinet highlights its role as a research partner with the MITRE Center for Threat-Informed Defense (CTID), contributing threat intelligence, operational expertise, and research to practical R&D projects. The CTID impact report (2019–2025) demonstrates collaborative efforts to map adversary behavior to detection, controls, and cloud security. Fortinet’s contributions focus on operationalizing ATT&CK-based frameworks, improving detection quality, and advancing program maturity across cloud, identity, and AI-driven workflows.

🔒 Amazon EC2 Capacity Blocks for ML is now available in AWS GovCloud (US-West) and AWS GovCloud (US-East), enabling government and regulated-industry customers to reserve GPU capacity for machine learning workloads. The service lets customers reserve GPU instances in advance for defined durations, providing assured access to accelerated compute for pre-training, fine-tuning, rapid prototyping, and surge inference. Reservations can be made up to eight weeks ahead for durations up to six months, in clusters of one to 64 instances, and can be shared across accounts using AWS Resource Access Manager.

🛡️ At Check Point Engage Public Sector 2026, leaders and practitioners convened to examine how AI is transforming cyber defense and offense for government organizations. Panels highlighted that AI enables automated, fast, and scalable attacks while also becoming core infrastructure for missions. Speakers urged a shift from reactive models to proactive, prevention-first strategies, emphasizing visibility, governance, and workforce controls to secure AI adoption.

🛡️ GitHub announced npm v12 will flip three permissive defaults to opt-in behavior to reduce software supply chain risk. Starting July 2026, npm will block install scripts, Git dependencies, and remote URL-sourced packages by default. Developers can upgrade to npm 11.16.0+ to receive warnings and use npm approve-scripts to build local allowlists in package.json. Experts praise stronger defaults but warn attackers may shift to private registries and maintainers may approve scripts to avoid build friction.

🔍 Cloudflare’s Security Insights runs automated scans to surface risks across accounts, zones, and DNS records. They faced two problems: scans were too infrequent (up to two weeks) and many free accounts were opt-in only. To resolve this they increased scanning throughput ~10x, redesigned Kafka consumers, optimized Postgres bulk inserts, centralized API latency to follow the primary DB, and improved scheduling with per-zone timing, randomization, and adaptive rate limiting.

🛡️ For years MDR filled a real gap by providing 24/7 human triage when teams were understaffed, but the modern threat landscape has outpaced that model. AI-powered attackers, expanded attack surfaces, and high alert volumes mean roughly 60% of alerts go unreviewed and low-severity alerts can hide real breaches. The article argues AI-driven SOCs that automate forensic-depth investigation, close the loop into detection engineering, and align pricing to endpoint counts are required to restore coverage and scalability.

🔥 Amazon EC2 High Memory U7i-8TB instances (u7i-8tb.112xlarge) are now available in the AWS Europe (Paris) region. These 7th-generation U7i instances are powered by custom 4th-generation Intel Xeon Scalable (Sapphire Rapids) processors and provide 8 TiB of DDR5 memory for scaling transaction processing throughput. They deliver 448 vCPUs, up to 100 Gbps EBS and network bandwidth, ENA Express, and up to 45% better price performance versus U-1 instances. U7i instances are targeted at mission-critical in-memory databases such as SAP HANA, Oracle, and SQL Server.

🤝 Amazon Quick now integrates with Snowflake Cortex AI via the Model Context Protocol (MCP), allowing teams to query Snowflake data and documents in natural language and automate multi-step workflows within Quick. After configuring Snowflake's managed MCP server with OAuth, users can query structured data with Cortex Analyst and unstructured documents with Cortex Search. The MCP connection is available across Quick features, including Quick Chat and Flows, and the integration is live in all AWS Regions where Amazon Quick is offered.

🆕 AWS now supports Amazon EKS local clusters on first- and second-generation AWS Outposts racks that boot Amazon EC2 instances from EC2 instance store. This extends Outposts’ static stability benefits to EKS local clusters, keeping the entire Kubernetes control plane on the Outpost to meet data residency needs and reduce impact from temporary network disconnects. The updated architecture brings greater operational parity with cloud EKS, includes managed control plane responsibilities, and adds support for EKS add-ons and modern auth mechanisms.

🛠️ Amazon CloudWatch Application Signals now ranks service health on the application map and adds new infrastructure, logs, and traces tabs on the service overview page, enabling operators to triage unhealthy services and inspect compute, log snippets, and trace details in one place. These features surface runtime indicators for Amazon EKS, Amazon ECS, AWS Lambda, and Amazon EC2, and provide curated metrics with deep links to relevant monitoring tools to speed root-cause analysis. The capabilities are available in all Regions that support Application Signals.

🔒 Google Cloud announces collaboration with Apple to support Apple’s expanded Private Cloud Compute (PCC) systems on Google Cloud, built with Intel and NVIDIA. The effort leverages Google Cloud’s Titanium security architecture and Confidential Computing portfolio, including hardware Trusted Execution Environments, to protect data at rest, in transit, and in use. This layered approach aims to deliver verifiable integrity, no privileged runtime access, and enforceable privacy protections for sensitive AI workloads.

🔍 This post summarizes three business-focused takeaways from Microsoft Build 2026 for leaders evaluating AI adoption. It explains how Microsoft is shifting from standalone models to a shared enterprise intelligence layer—Microsoft IQ—that connects business data and processes across systems. The article highlights Azure’s agent platform and Foundry updates for production-grade deployment, governance, and performance, emphasizing that AI is expected to deliver measurable outcomes now.

🎯 Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 18, starting with 18.3. This release brings community improvements to query performance and database management and adds the pg_roaringbitmap extension for fast, memory-efficient set operations on large integer collections. PostgreSQL 18 also introduces B-tree skip scans, retained optimizer statistics during major upgrades, and parallel streaming of large transactions for logical replication. Aurora 18.3 is available in all commercial AWS Regions and AWS GovCloud (US); upgrade options include RDS Blue/Green, in-place upgrades, or snapshot restores.

📣 Amazon Managed Workflows for Apache Airflow (MWAA) Serverless now publishes workflow and task state change events to Amazon EventBridge, enabling event-driven automation for Airflow pipelines. Previously, teams relied on custom polling or manual monitoring; this capability lets MWAA Serverless emit events for workflow states (started, running, succeeded, failed) and task states (scheduled, succeeded, failed, up for retry). Use cases include alerting on failures, triggering downstream pipelines when upstream workflows succeed, and logging state transitions for compliance.

🗂️ Elastic Beanstalk now surfaces Amazon CloudWatch Logs directly within the environment Logs tab, letting users view and filter log groups and streams without leaving the Elastic Beanstalk console. The Logs tab lists environment-associated log groups (including those matching the aws/elasticbeanstalk//* prefix), auto-selects the most recently active stream, and offers a stream dropdown and filtering options. A "View in CloudWatch" dropdown provides direct links to the log group, log stream, or CloudWatch Logs Insights for deeper analysis. This capability is available across all Elastic Beanstalk platform branches in AWS Commercial and AWS GovCloud (US) Regions where the service is offered.

🔍 Looker introduces dashboard agents in preview to enable conversational, in-dashboard exploration of BI data. The agent leverages the dashboard’s filters, cross-filters, and curated tiles to provide context-aware answers and can access underlying Explores for additional detail. Analysts can configure the agent with natural-language instructions to align responses with business logic, and the system surfaces intermediate reasoning, cited tiles, and applied filters to build user trust. Admins enable the feature in Looker 26.08.11+ via the Gemini settings.

🔐 AWS Lake Formation now allows reading and writing the underlying Amazon S3 data files for tables registered in the AWS Glue Data Catalog, unifying permissions for SQL and direct file access. It issues temporary, scoped credentials tied to Lake Formation table grants—SELECT for read and SUPER for read/write—and is supported in Amazon EMR 7.13+. You can use Spark or Trino with provided APIs or an open source plugin, and all activity is logged in AWS CloudTrail. This capability is available at no extra charge in supported Regions.

🔒 Check Point announced it has joined OpenAI’s Trusted Access for Cyber (TAC) program and the Daybreak initiative to access advanced cyber-capable models. The company will use GPT-5.5, OpenAI’s Codex agentic framework, and direct support from OpenAI to enhance threat analysis, incident investigation, detection engineering, and secure code review. Check Point emphasizes disciplined, focused application of these models to strengthen prevention, speed delivery, and maintain product security for enterprise customers.

🔍 Amazon Managed Service for Prometheus now supports ingestion, storage, and querying of Prometheus native histograms, enabling higher-resolution metric distributions with lower cardinality compared to classic histograms. DevOps and SRE teams can obtain more accurate percentile calculations without predefining bucket boundaries. Native histograms use exponential bucketing and store full distributions in a single time series, reducing series count and lowering costs by metering only populated buckets.

🔧 Amazon Managed Service for Prometheus now supports out-of-order sample ingestion and a workspace-level rule query offset. By default, workspaces accept late-arriving samples within a 1-minute window, adjustable or disableable. A global rule query offset delays rule evaluations so late samples can be included, improving alerting accuracy. Two new CloudWatch vended metrics provide visibility to tune these settings.