All news in category “Vendor and Hyperscaler Watch”

🔒 This article outlines Kaspersky’s approach to securing modern connected and autonomous vehicles, emphasizing the need to combine functional safety with cybersecurity. It highlights standards such as ISO/SAE 21434, UNECE R155/R156, and China’s GB 44495-2024, and explains the role of security gateways and SecOC for CAN bus protection. The piece also discusses distributed IDS monitoring, fleet-wide SIEM integration, and Kaspersky’s KASG and Unified Monitoring and Analysis Platform as implementations.

🛠️ AWS Compute Optimizer now supports extending the default 14-day lookback period to 32 days for Amazon EBS volume and Amazon ECS service rightsizing recommendations at no extra cost. The longer lookback captures monthly utilization patterns such as month-end processing to improve optimization decisions for cost and performance. The 32-day option is available for EC2 instance, EC2 Auto Scaling group, RDS database, EBS volume, and ECS service recommendations. You can set the lookback at organization, account, or resource level via the console, AWS SDK, or AWS CLI, and it’s available in all AWS Regions where Compute Optimizer is offered except GovCloud (US) and China.

🔔 Amazon Application Recovery Controller (ARC) Region switch introduces three new execution blocks: Amazon Aurora serverless scaling, Amazon Aurora provisioned scaling, and Amazon Neptune global database failover. These blocks automate database scaling and failover for multi-Region workloads, eliminating manual steps that add recovery time. They support cross-account orchestration so a single plan can coordinate operations across multiple accounts and Regions.

🛡️ Fortinet announces that FortiEDR achieved AV-Comparatives 2026 Shellcode Execution/Process Injection certification by successfully preventing or detecting all 15 tested in-memory attack techniques. The evaluation focused on evasive shellcode execution and process injection methods mapped to MITRE ATT&CK T1055. Fortinet also confirmed these EDR capabilities are delivered through FortiEndpoint, and passed false-positive validation to avoid disrupting legitimate applications.

🔔 Amazon Keyspaces (for Apache Cassandra) now includes an iterator position in the GetRecords response for CDC streams, indicating whether a consumer is AT_TIP or BEHIND_TIP. This enables consumers to reduce unnecessary polling and lower CDC consumption costs by adjusting polling frequency based on stream position. The feature is available in all Regions where Keyspaces CDC is supported and requires the latest AWS SDK.

🚀 Managed Service for Apache Spark runtime 3.0 reduces setup and startup friction for Spark workloads. It automates IAM, networking, and API provisioning to shorten the time to first job and cuts startup latency by 75% for standard and premium tiers. The runtime adds support for GPU obtainability via Dynamic Workload Scheduler Flex Start, enhanced multi-zonal execution with no cross-zone network charges, and compatibility with upcoming Spark 4.x features like Spark Connect.

🔧 Amazon SageMaker Unified Studio now offers a localized user interface in twelve languages, including Simplified and Traditional Chinese, French, German, Japanese, Korean, Spanish, Portuguese (Brazilian), Italian, Indonesian, Turkish, and American English. Language selection is automatic via the browser or manually set through the profile Language selector, and the choice applies across the entire studio. This localization is available in all AWS Regions where SageMaker Unified Studio is offered and supports both AWS IAM Identity Center-based and IAM-based domains.

🚀 Amazon ECS Managed Instances now supports AWS Trainium and AWS Inferentia accelerators, enabling scalable training and inference for generative AI workloads. This fully managed compute option offloads infrastructure operations to AWS while preserving the full capabilities of Amazon EC2. You can select Inferentia2, Trainium1, or Trainium2 when creating a capacity provider and set NEURON_CORE=all to allocate the accelerator per task. Management charges apply in addition to standard EC2 costs.

🔔 AWS Config now supports nine additional AWS resource types across Amazon Bedrock, Amazon Bedrock AgentCore, and Amazon SageMaker. This update expands visibility and governance, allowing you to discover, assess, audit, and remediate a broader set of resources. If you record all resource types, AWS Config will automatically begin tracking these additions, and they are available for use in Config rules and Config aggregators. The newly supported resource types are listed for monitoring in all Regions where the services are available.

📱 Google is rolling out a new fake call detection feature for Android 12+ devices, starting with Pixel phones and enabled by default. When both parties use Phone by Google and RCS-enabled Messages, the caller's device sends a silent encrypted confirmation to the recipient; if absent, the recipient's device pings the contact's phone to verify authenticity and shows a warning if the contact denies making the call. The feature aims to counter AI voice-cloning and number-spoofing scams.

🛡️ This article explains why AI requires a unified security architecture — the AI Defense Plane — to discover, protect, govern, and assure AI behavior across employees, applications, and agents. It describes how AI becomes an execution layer that can retrieve data, call tools, and take actions, creating risks that traverse traditional security boundaries. The piece emphasizes runtime protection, coordinated enforcement, and continuous testing to prevent prompt-based attacks, data exposure, and unsafe agent behavior.

✅ Amazon RDS for Db2 now supports IBM Db2 v12.1, including Db2 Standard, Db2 Advanced, and the Db2 Community Edition. Db2 Community Edition offers the same features as Standard and Advanced without commercial licensing charges for development and test use. To use it, obtain a free IBM Customer ID and create instances via the Amazon RDS console. The new support is available in all Regions where Amazon RDS for Db2 is offered.

🔍 AWS IoT Core now emits two new Amazon CloudWatch Log event types to help troubleshoot device connectivity and authentication across IoT fleets. The Ping log captures MQTT Keep‑alive messages to identify connections or devices that fail to maintain connectivity. The Connection.AuthNError log records rejected connection attempts with detailed error codes to speed resolution of credential and certificate issues. Enable event-level logging and choose a CloudWatch log group, then opt into these event types; they are available in all AWS Regions where AWS IoT Core operates.

🔔 Amazon Connect Customer now delivers real-time dashboard alerts when specified keywords, phrases, or sentiment patterns arise during live calls and chats. Supervisors can listen to live conversations, view real-time transcripts and sentiment analysis, and coach agents via chat to address issues such as cancellation requests before customers churn. The feature is available in all AWS commercial and AWS GovCloud (US-West) regions offering conversational analytics.

🐧 Microsoft unveiled Coreutils for Windows at Build 2026, delivering many familiar Linux command-line utilities as native Windows applications. Based on the open-source uutils project (a Rust rewrite of GNU coreutils), the release aims to let developers use the same commands across Linux, macOS, Windows, and WSL without changing workflows. The package is available on GitHub and via WinGet as a single coreutils.exe binary that exposes individual command names through NTFS hardlinks. Microsoft notes some command conflicts, POSIX limitations, and behavioral differences on Windows.

🧭 OpenAI has updated the GPT-5.5 Instant model to improve answer accuracy, pacing, and conversational style while reducing long, bullet-heavy responses to sound more natural. The company will retire legacy models: o3 on August 26 with a 90-day sunset and GPT-4.5 on June 27 with a 30-day sunset. Additionally, OpenAI is integrating a job search tool into ChatGPT to surface live listings and help tailor resumes, and it has enhanced resume editing and export capabilities. These changes are rolling out globally to paid users.

🔔 AWS now supports Kubernetes version 1.36 in Amazon EKS and Amazon EKS Distro. You can create new clusters or upgrade existing ones using the EKS console, eksctl, or infrastructure-as-code tools across all AWS Regions, including GovCloud. Key features in 1.36 include GA User Namespaces, Mutating Admission Policies for CEL, In-Place Pod-Level Vertical Scaling, and Resource Health Status reporting. EKS Distro images are available in ECR Public Gallery and GitHub, with documentation covering upgrade guidance and lifecycle policies.

🧭 This blog documents an experiment using Google Cloud to deploy a Gemma 3 inference workload across two regional GKE clusters, leveraging TPU v6e instances, managed DRANET for accelerator networking, and a multi-cluster Inference Gateway for cross‑region routing and failover. It describes building VPCs, reserving internal IPs, configuring Cloud Storage FUSE for model storage, creating TPU node pools with managed DRANET, registering clusters into a GKE Fleet, and deploying the inference server and gateway with health checks and autoscaling metrics. The objective is resilient, low‑latency routing to the nearest region with automatic failover to the other region if one fails.

🧭 Microsoft outlines a shift from isolated AI tools to a unified, enterprise-grade agent platform that runs real work. The post emphasizes a single integrated system spanning Azure, GitHub, Microsoft IQ, Foundry, Agent 365, and Microsoft 365 to build, contextualize, run, govern, and improve agents. It stresses secure-by-design governance, model choice, continuous improvement through feedback and tuning, and production-grade runtimes. The approach centers developers and enterprise context to make agents trustworthy and scalable.

🔐 AWS KMS introduced the GetKeyLastUsage API to report the date, time, operation type, CloudTrail event ID, and KMS request ID for the most recent cryptographic operation on a key. The feature works for customer-managed and AWS-managed keys across specs and origins and is visible in the AWS Management Console and AWS CLI. Tracking of last usage began on April 23, 2026 for most Regions, so historical gaps before tracking began should be considered. Use DisableKey, monitoring, and the kms:TrailingDaysWithoutKeyUsage condition to prevent accidental deletions.